Lucene search

[email protected]NVD:CVE-2022-20832

HistoryNov 15, 2022 - 9:15 p.m.

CVE-2022-20832

2022-11-1521:15:23

CWE-79

[email protected]

web.nvd.nist.gov

cisco firepower management center

multiple vulnerabilities

stored cross-site scripting (xss) attack

insufficient validation

user-supplied input

arbitrary script code

sensitive information access

temporary availability impact

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

29.2%

JSON

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.

These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface, or access sensitive, browser-based information. In some cases, it is also possible to cause a temporary availability impact to portions of the FMC Dashboard.

Affected configurations

Nvd

Node

ciscofirepower_management_centerMatch6.1.0

ciscofirepower_management_centerMatch6.1.0.1

ciscofirepower_management_centerMatch6.1.0.2

ciscofirepower_management_centerMatch6.1.0.3

ciscofirepower_management_centerMatch6.1.0.4

ciscofirepower_management_centerMatch6.1.0.5

ciscofirepower_management_centerMatch6.1.0.6

ciscofirepower_management_centerMatch6.1.0.7

ciscofirepower_management_centerMatch6.2.0

ciscofirepower_management_centerMatch6.2.0.1

ciscofirepower_management_centerMatch6.2.0.2

ciscofirepower_management_centerMatch6.2.0.3

ciscofirepower_management_centerMatch6.2.0.4

ciscofirepower_management_centerMatch6.2.0.5

ciscofirepower_management_centerMatch6.2.0.6

ciscofirepower_management_centerMatch6.2.1

ciscofirepower_management_centerMatch6.2.2

ciscofirepower_management_centerMatch6.2.2.1

ciscofirepower_management_centerMatch6.2.2.2

ciscofirepower_management_centerMatch6.2.2.3

ciscofirepower_management_centerMatch6.2.2.4

ciscofirepower_management_centerMatch6.2.2.5

ciscofirepower_management_centerMatch6.2.3

ciscofirepower_management_centerMatch6.2.3.1

ciscofirepower_management_centerMatch6.2.3.2

ciscofirepower_management_centerMatch6.2.3.3

ciscofirepower_management_centerMatch6.2.3.4

ciscofirepower_management_centerMatch6.2.3.5

ciscofirepower_management_centerMatch6.2.3.6

ciscofirepower_management_centerMatch6.2.3.7

ciscofirepower_management_centerMatch6.2.3.9

ciscofirepower_management_centerMatch6.2.3.10

ciscofirepower_management_centerMatch6.2.3.11

ciscofirepower_management_centerMatch6.2.3.12

ciscofirepower_management_centerMatch6.2.3.13

ciscofirepower_management_centerMatch6.2.3.14

ciscofirepower_management_centerMatch6.2.3.15

ciscofirepower_management_centerMatch6.2.3.16

ciscofirepower_management_centerMatch6.2.3.17

ciscofirepower_management_centerMatch6.2.3.18

ciscofirepower_management_centerMatch6.3.0

ciscofirepower_management_centerMatch6.3.0.1

ciscofirepower_management_centerMatch6.3.0.2

ciscofirepower_management_centerMatch6.3.0.3

ciscofirepower_management_centerMatch6.3.0.4

ciscofirepower_management_centerMatch6.3.0.5

ciscofirepower_management_centerMatch6.4.0

ciscofirepower_management_centerMatch6.4.0.1

ciscofirepower_management_centerMatch6.4.0.2

ciscofirepower_management_centerMatch6.4.0.3

ciscofirepower_management_centerMatch6.4.0.4

ciscofirepower_management_centerMatch6.4.0.5

ciscofirepower_management_centerMatch6.4.0.7

ciscofirepower_management_centerMatch6.4.0.8

ciscofirepower_management_centerMatch6.4.0.9

ciscofirepower_management_centerMatch6.4.0.10

ciscofirepower_management_centerMatch6.4.0.11

ciscofirepower_management_centerMatch6.4.0.12

ciscofirepower_management_centerMatch6.4.0.13

ciscofirepower_management_centerMatch6.4.0.14

ciscofirepower_management_centerMatch6.4.0.15

ciscofirepower_management_centerMatch6.5.0

ciscofirepower_management_centerMatch6.5.0.1

ciscofirepower_management_centerMatch6.5.0.2

ciscofirepower_management_centerMatch6.5.0.3

ciscofirepower_management_centerMatch6.5.0.4

ciscofirepower_management_centerMatch6.5.0.5

ciscofirepower_management_centerMatch6.6.0

ciscofirepower_management_centerMatch6.6.0.1

ciscofirepower_management_centerMatch6.6.1

ciscofirepower_management_centerMatch6.6.3

ciscofirepower_management_centerMatch6.6.4

ciscofirepower_management_centerMatch6.6.5

ciscofirepower_management_centerMatch6.6.5.1

ciscofirepower_management_centerMatch6.6.5.2

ciscofirepower_management_centerMatch6.6.7

ciscofirepower_management_centerMatch6.7.0

ciscofirepower_management_centerMatch6.7.0.1

ciscofirepower_management_centerMatch6.7.0.2

ciscofirepower_management_centerMatch6.7.0.3

ciscofirepower_management_centerMatch7.0.0

ciscofirepower_management_centerMatch7.0.0.1

ciscofirepower_management_centerMatch7.0.1

ciscofirepower_management_centerMatch7.0.1.1

ciscofirepower_management_centerMatch7.0.2

ciscofirepower_management_centerMatch7.0.2.1

ciscofirepower_management_centerMatch7.0.3

ciscofirepower_management_centerMatch7.0.4

ciscofirepower_management_centerMatch7.1.0

ciscofirepower_management_centerMatch7.1.0.1

ciscofirepower_management_centerMatch7.1.0.2

ciscofirepower_management_centerMatch7.2.0

VendorProductVersionCPE
ciscofirepower_management_center6.1.0cpe:2.3:a:cisco:firepower_management_center:6.1.0:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.1cpe:2.3:a:cisco:firepower_management_center:6.1.0.1:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.2cpe:2.3:a:cisco:firepower_management_center:6.1.0.2:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.3cpe:2.3:a:cisco:firepower_management_center:6.1.0.3:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.4cpe:2.3:a:cisco:firepower_management_center:6.1.0.4:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.5cpe:2.3:a:cisco:firepower_management_center:6.1.0.5:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.6cpe:2.3:a:cisco:firepower_management_center:6.1.0.6:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.7cpe:2.3:a:cisco:firepower_management_center:6.1.0.7:*:*:*:*:*:*:*
ciscofirepower_management_center6.2.0cpe:2.3:a:cisco:firepower_management_center:6.2.0:*:*:*:*:*:*:*
ciscofirepower_management_center6.2.0.1cpe:2.3:a:cisco:firepower_management_center:6.2.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	firepower_management_center	6.1.0	cpe:2.3:a:cisco:firepower_management_center:6.1.0:::::::*
cisco	firepower_management_center	6.1.0.1	cpe:2.3:a:cisco:firepower_management_center:6.1.0.1:::::::*
cisco	firepower_management_center	6.1.0.2	cpe:2.3:a:cisco:firepower_management_center:6.1.0.2:::::::*
cisco	firepower_management_center	6.1.0.3	cpe:2.3:a:cisco:firepower_management_center:6.1.0.3:::::::*
cisco	firepower_management_center	6.1.0.4	cpe:2.3:a:cisco:firepower_management_center:6.1.0.4:::::::*
cisco	firepower_management_center	6.1.0.5	cpe:2.3:a:cisco:firepower_management_center:6.1.0.5:::::::*
cisco	firepower_management_center	6.1.0.6	cpe:2.3:a:cisco:firepower_management_center:6.1.0.6:::::::*
cisco	firepower_management_center	6.1.0.7	cpe:2.3:a:cisco:firepower_management_center:6.1.0.7:::::::*
cisco	firepower_management_center	6.2.0	cpe:2.3:a:cisco:firepower_management_center:6.2.0:::::::*
cisco	firepower_management_center	6.2.0.1	cpe:2.3:a:cisco:firepower_management_center:6.2.0.1:::::::*