The vulnerability in the web interface of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a attacker to carry out XSS attacks.

🗓️ 06 Dec 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Cisco Secure Firewall Management Center web interface vulnerability enables remote XSS.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-20269	23 Oct 202419:54	–	circl
Cisco	Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities	23 Oct 202416:00	–	cisco
CNNVD	Cisco Firepower Management Center 安全漏洞	23 Oct 202400:00	–	cnnvd
CVE	CVE-2024-20269	23 Oct 202417:07	–	cve
Cvelist	CVE-2024-20269 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability	23 Oct 202417:07	–	cvelist
EUVD	EUVD-2024-17984	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20269	23 Oct 202417:15	–	nvd
OSV	CVE-2024-20269	23 Oct 202417:15	–	osv
Positive Technologies	PT-2024-9143 · Cisco · Cisco Secure Firewall Management Center	23 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-20269	23 May 202507:49	–	redhatcve

Vulners

Node

cisco_systems cisco_firepower_management_centerMatch6.2.3.6

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.1

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.2

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.11

OR

cisco_systems cisco_firepower_management_centerMatch6.6.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.0

OR

cisco_systems cisco_firepower_management_centerMatch7.0.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.2

OR

cisco_systems cisco_firepower_management_centerMatch7.0.2.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.0.4

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.3

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.4

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.5

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.7

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.9

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.10

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.11

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.12

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.13

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.14

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.15

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.16

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.17

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.18

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.1

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.3

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.2

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.4

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.5

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.6

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.7

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.8

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.9

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.10

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.12

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.13

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.14

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.15

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.16

OR

cisco_systems cisco_firepower_management_centerMatch6.6.5.1

OR

cisco_systems cisco_firepower_management_centerMatch6.6.5.2

OR

cisco_systems cisco_firepower_management_centerMatch6.6.7.1

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.1

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.2

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.0.5

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.2

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.2.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.2.3.1

OR

cisco_systems cisco_firepower_management_centerMatch7.3.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6

OR

cisco_systems cisco_firepower_management_centerMatch7.2.4.1

OR

cisco_systems cisco_firepower_management_centerMatch7.3.1.2

OR

cisco_systems cisco_firepower_management_centerMatch7.4.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.5.1

OR

cisco_systems cisco_firepower_management_centerMatch7.2.5.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.8.1

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.8

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.17

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.18

OR

cisco_systems cisco_firepower_management_centerMatch6.6.7.2

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-dhJxQYZs
web	www.web.nvd.nist.gov/view/vuln/detail

06 Dec 2024 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS 35.4

CVSS 25.5

EPSS0.0038

Cisco Secure Firewall Management Center web interface remote attack Cross Site Scripting page protection