Lucene search

[email protected]CVE-2023-20206

HistoryNov 01, 2023 - 5:15 p.m.

CVE-2023-20206

2023-11-0117:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cve

2023

20206

cisco

fmc

software

xss

vulnerability

web-based management interface

remote attack

cross-site scripting

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

27.1%

JSON

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface, or access sensitive, browser-based information. In some cases, it is also possible to cause a temporary availability impact to portions of the FMC Dashboard.

Affected configurations

NVD

Node

ciscofirepower_management_centerRange6.6.0–6.6.7.1

ciscofirepower_management_centerRange6.7.0–6.7.0.3

ciscofirepower_management_centerRange7.0.0–7.0.5

ciscofirepower_management_centerRange7.1.0–7.1.0.3

ciscofirepower_management_centerRange7.2.0–7.2.4

ciscofirepower_management_centerRange7.3.0–7.3.1.1

CPENameOperatorVersion
cisco:firepower_management_centercisco firepower management centerle6.6.7.1
cisco:firepower_management_centercisco firepower management centerle6.7.0.3
cisco:firepower_management_centercisco firepower management centerle7.0.5
cisco:firepower_management_centercisco firepower management centerle7.1.0.3
cisco:firepower_management_centercisco firepower management centerle7.2.4
cisco:firepower_management_centercisco firepower management centerle7.3.1.1

CPE	Name	Operator	Version
cisco:firepower_management_center	cisco firepower management center	le	6.6.7.1
cisco:firepower_management_center	cisco firepower management center	le	6.7.0.3
cisco:firepower_management_center	cisco firepower management center	le	7.0.5
cisco:firepower_management_center	cisco firepower management center	le	7.1.0.3
cisco:firepower_management_center	cisco firepower management center	le	7.2.4
cisco:firepower_management_center	cisco firepower management center	le	7.3.1.1

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Firepower Management Center",
    "versions": [
      {
        "version": "6.6.0",
        "status": "affected"
      },
      {
        "version": "6.6.0.1",
        "status": "affected"
      },
      {
        "version": "6.6.1",
        "status": "affected"
      },
      {
        "version": "6.6.3",
        "status": "affected"
      },
      {
        "version": "6.6.4",
        "status": "affected"
      },
      {
        "version": "6.6.5",
        "status": "affected"
      },
      {
        "version": "6.6.5.1",
        "status": "affected"
      },
      {
        "version": "6.6.5.2",
        "status": "affected"
      },
      {
        "version": "6.6.7",
        "status": "affected"
      },
      {
        "version": "6.6.7.1",
        "status": "affected"
      },
      {
        "version": "6.7.0",
        "status": "affected"
      },
      {
        "version": "6.7.0.1",
        "status": "affected"
      },
      {
        "version": "6.7.0.2",
        "status": "affected"
      },
      {
        "version": "6.7.0.3",
        "status": "affected"
      },
      {
        "version": "7.0.0",
        "status": "affected"
      },
      {
        "version": "7.0.0.1",
        "status": "affected"
      },
      {
        "version": "7.0.1",
        "status": "affected"
      },
      {
        "version": "7.0.1.1",
        "status": "affected"
      },
      {
        "version": "7.0.2",
        "status": "affected"
      },
      {
        "version": "7.0.2.1",
        "status": "affected"
      },
      {
        "version": "7.0.3",
        "status": "affected"
      },
      {
        "version": "7.0.4",
        "status": "affected"
      },
      {
        "version": "7.0.5",
        "status": "affected"
      },
      {
        "version": "7.1.0",
        "status": "affected"
      },
      {
        "version": "7.1.0.1",
        "status": "affected"
      },
      {
        "version": "7.1.0.2",
        "status": "affected"
      },
      {
        "version": "7.1.0.3",
        "status": "affected"
      },
      {
        "version": "7.2.0",
        "status": "affected"
      },
      {
        "version": "7.2.1",
        "status": "affected"
      },
      {
        "version": "7.2.2",
        "status": "affected"
      },
      {
        "version": "7.2.0.1",
        "status": "affected"
      },
      {
        "version": "7.2.3",
        "status": "affected"
      },
      {
        "version": "7.2.3.1",
        "status": "affected"
      },
      {
        "version": "7.2.4",
        "status": "affected"
      },
      {
        "version": "7.3.0",
        "status": "affected"
      },
      {
        "version": "7.3.1",
        "status": "affected"
      },
      {
        "version": "7.3.1.1",
        "status": "affected"
      }
    ]
  }
]