CVE-2019-1930

🗓️ 06 Jul 2019 01:30:29Reported by ciscoType

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected device

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-1930	6 Jul 201905:00	–	circl
Cisco	Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities	3 Jul 201916:00	–	cisco
Tenable Nessus	Cisco Firepower Management Center 6.2.3.x < 6.2.3.14 / 6.3.0.x < 6.3.0.4 / 6.4.0.x < 6.4.0.2 XSS (cisco-sa-20190703-fmc-xss)	5 Aug 201900:00	–	nessus
CNVD	Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-21303)	5 Jul 201900:00	–	cnvd
Cvelist	CVE-2019-1930 Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities	6 Jul 201901:30	–	cvelist
EUVD	EUVD-2019-10487	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1930	6 Jul 201902:15	–	nvd
Prion	Cross site scripting	6 Jul 201902:15	–	prion
Positive Technologies	PT-2019-2655 · Cisco · Cisco Firepower Management Center	3 Jul 201900:00	–	ptsecurity
Vulnrichment	CVE-2019-1930 Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities	6 Jul 201901:30	–	vulnrichment

NVD

Node

cisco secure_firewall_management_centerMatch6.2.3

cisco secure_firewall_management_centerMatch6.3.0

cisco secure_firewall_management_centerMatch6.4.0

cisco secure_firewall_management_centerMatch6.5.0

[
  {
    "product": "Cisco Firepower Management Center",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "6.2.3.14",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-fmc-xss

26 Nov 2024 16:09Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.00132

SSVC

CWE-79