The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting attacks.

🗓️ 31 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

The web interface vulnerability in Cisco Firepower Management Center allows remote cross site scripting attacks.

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities	23 Oct 202416:00	–	cisco
CNNVD	Cisco Firepower Management Center 安全漏洞	23 Oct 202400:00	–	cnnvd
CNVD	Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2024-43207)	30 Oct 202400:00	–	cnvd
CVE	CVE-2024-20409	23 Oct 202417:38	–	cve
Cvelist	CVE-2024-20409	23 Oct 202417:38	–	cvelist
EUVD	EUVD-2024-18124	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20409	23 Oct 202418:15	–	nvd
OSV	CVE-2024-20409	23 Oct 202418:15	–	osv
Positive Technologies	PT-2024-7458 · Cisco · Cisco Firepower Management Center	23 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-20409	23 May 202506:14	–	redhatcve

Vulners

Node

cisco_systems cisco_firepower_management_centerMatch6.2.3

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.6

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.1

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.2

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.11

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0

OR

cisco_systems cisco_firepower_management_centerMatch6.6.0

OR

cisco_systems cisco_firepower_management_centerMatch6.6.0.1

OR

cisco_systems cisco_firepower_management_centerMatch6.6.1

OR

cisco_systems cisco_firepower_management_centerMatch6.6.3

OR

cisco_systems cisco_firepower_management_centerMatch6.6.4

OR

cisco_systems cisco_firepower_management_centerMatch6.6.7

OR

cisco_systems cisco_firepower_management_centerMatch7.0.0

OR

cisco_systems cisco_firepower_management_centerMatch7.0.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.2

OR

cisco_systems cisco_firepower_management_centerMatch7.0.2.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.0.4

OR

cisco_systems cisco_firepower_management_centerMatch7.2.0

OR

cisco_systems cisco_firepower_management_centerMatch7.2.1

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.3

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.4

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.5

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.7

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.9

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.10

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.11

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.12

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.13

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.14

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.15

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.16

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.17

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.18

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.1

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.3

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.2

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.4

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.5

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.6

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.7

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.8

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.9

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.10

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.12

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.13

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.14

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.15

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.16

OR

cisco_systems cisco_firepower_management_centerMatch6.6.5

OR

cisco_systems cisco_firepower_management_centerMatch6.6.5.1

OR

cisco_systems cisco_firepower_management_centerMatch6.6.5.2

OR

cisco_systems cisco_firepower_management_centerMatch6.6.7.1

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.1

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.2

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.0.5

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.2

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.2.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.2.3

OR

cisco_systems cisco_firepower_management_centerMatch7.2.3.1

OR

cisco_systems cisco_firepower_management_centerMatch7.3.0

OR

cisco_systems cisco_firepower_management_centerMatch7.3.1

OR

cisco_systems cisco_firepower_management_centerMatch7.3.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6

OR

cisco_systems cisco_firepower_management_centerMatch7.2.4.1

OR

cisco_systems cisco_firepower_management_centerMatch7.3.1.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.4

OR

cisco_systems cisco_firepower_management_centerMatch7.2.5

OR

cisco_systems cisco_firepower_management_centerMatch7.4.0

OR

cisco_systems cisco_firepower_management_centerMatch7.4.1

OR

cisco_systems cisco_firepower_management_centerMatch7.4.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.5.1

OR

cisco_systems cisco_firepower_management_centerMatch7.2.6

OR

cisco_systems cisco_firepower_management_centerMatch7.2.7

OR

cisco_systems cisco_firepower_management_centerMatch7.2.5.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.8

OR

cisco_systems cisco_firepower_management_centerMatch7.2.8.1

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.8

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.17

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.18

OR

cisco_systems cisco_firepower_management_centerMatch6.6.7.2

OR

cisco_systems cisco_firepower_management_centerMatch7.4.2

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-dhJxQYZs
web	www.web.nvd.nist.gov/view/vuln/detail

31 Oct 2024 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 36.1

CVSS 26.4

EPSS0.00301

Cisco Firepower Management Center Cross site scripting Web interface vulnerability Remote exploitation Network management