Lucene search

[email protected]NVD:CVE-2022-20835

HistoryNov 15, 2022 - 9:15 p.m.

CVE-2022-20835

2022-11-1521:15:24

CWE-79

[email protected]

web.nvd.nist.gov

cisco firepower management center

remote attackers

stored cross-site scripting

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

29.2%

JSON

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.

These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface, or access sensitive, browser-based information. In some cases, it is also possible to cause a temporary availability impact to portions of the FMC Dashboard.

Affected configurations

Nvd

Node

ciscofirepower_management_centerMatch6.1.0

ciscofirepower_management_centerMatch6.1.0.1

ciscofirepower_management_centerMatch6.1.0.2

ciscofirepower_management_centerMatch6.1.0.3

ciscofirepower_management_centerMatch6.1.0.4

ciscofirepower_management_centerMatch6.1.0.5

ciscofirepower_management_centerMatch6.1.0.6

ciscofirepower_management_centerMatch6.1.0.7

ciscofirepower_management_centerMatch6.2.0

ciscofirepower_management_centerMatch6.2.0.1

ciscofirepower_management_centerMatch6.2.0.2

ciscofirepower_management_centerMatch6.2.0.3

ciscofirepower_management_centerMatch6.2.0.4

ciscofirepower_management_centerMatch6.2.0.5

ciscofirepower_management_centerMatch6.2.0.6

ciscofirepower_management_centerMatch6.2.1

ciscofirepower_management_centerMatch6.2.2

ciscofirepower_management_centerMatch6.2.2.1

ciscofirepower_management_centerMatch6.2.2.2

ciscofirepower_management_centerMatch6.2.2.3

ciscofirepower_management_centerMatch6.2.2.4

ciscofirepower_management_centerMatch6.2.2.5

ciscofirepower_management_centerMatch6.2.3

ciscofirepower_management_centerMatch6.2.3.1

ciscofirepower_management_centerMatch6.2.3.2

ciscofirepower_management_centerMatch6.2.3.3

ciscofirepower_management_centerMatch6.2.3.4

ciscofirepower_management_centerMatch6.2.3.5

ciscofirepower_management_centerMatch6.2.3.6

ciscofirepower_management_centerMatch6.2.3.7

ciscofirepower_management_centerMatch6.2.3.9

ciscofirepower_management_centerMatch6.2.3.10

ciscofirepower_management_centerMatch6.2.3.11

ciscofirepower_management_centerMatch6.2.3.12

ciscofirepower_management_centerMatch6.2.3.13

ciscofirepower_management_centerMatch6.2.3.14

ciscofirepower_management_centerMatch6.2.3.15

ciscofirepower_management_centerMatch6.2.3.16

ciscofirepower_management_centerMatch6.2.3.17

ciscofirepower_management_centerMatch6.2.3.18

ciscofirepower_management_centerMatch6.3.0

ciscofirepower_management_centerMatch6.3.0.1

ciscofirepower_management_centerMatch6.3.0.2

ciscofirepower_management_centerMatch6.3.0.3

ciscofirepower_management_centerMatch6.3.0.4

ciscofirepower_management_centerMatch6.3.0.5

ciscofirepower_management_centerMatch6.4.0

ciscofirepower_management_centerMatch6.4.0.1

ciscofirepower_management_centerMatch6.4.0.2

ciscofirepower_management_centerMatch6.4.0.3

ciscofirepower_management_centerMatch6.4.0.4

ciscofirepower_management_centerMatch6.4.0.5

ciscofirepower_management_centerMatch6.4.0.7

ciscofirepower_management_centerMatch6.4.0.8

ciscofirepower_management_centerMatch6.4.0.9

ciscofirepower_management_centerMatch6.4.0.10

ciscofirepower_management_centerMatch6.4.0.11

ciscofirepower_management_centerMatch6.4.0.12

ciscofirepower_management_centerMatch6.4.0.13

ciscofirepower_management_centerMatch6.4.0.14

ciscofirepower_management_centerMatch6.4.0.15

ciscofirepower_management_centerMatch6.5.0

ciscofirepower_management_centerMatch6.5.0.1

ciscofirepower_management_centerMatch6.5.0.2

ciscofirepower_management_centerMatch6.5.0.3

ciscofirepower_management_centerMatch6.5.0.4

ciscofirepower_management_centerMatch6.5.0.5

ciscofirepower_management_centerMatch6.6.0

ciscofirepower_management_centerMatch6.6.0.1

ciscofirepower_management_centerMatch6.6.1

ciscofirepower_management_centerMatch6.6.3

ciscofirepower_management_centerMatch6.6.4

ciscofirepower_management_centerMatch6.6.5

ciscofirepower_management_centerMatch6.6.5.1

ciscofirepower_management_centerMatch6.6.5.2

ciscofirepower_management_centerMatch6.6.7

ciscofirepower_management_centerMatch6.7.0

ciscofirepower_management_centerMatch6.7.0.1

ciscofirepower_management_centerMatch6.7.0.2

ciscofirepower_management_centerMatch6.7.0.3

ciscofirepower_management_centerMatch7.0.0

ciscofirepower_management_centerMatch7.0.0.1

ciscofirepower_management_centerMatch7.0.1

ciscofirepower_management_centerMatch7.0.1.1

ciscofirepower_management_centerMatch7.0.2

ciscofirepower_management_centerMatch7.0.2.1

ciscofirepower_management_centerMatch7.0.3

ciscofirepower_management_centerMatch7.0.4

ciscofirepower_management_centerMatch7.1.0

ciscofirepower_management_centerMatch7.1.0.1

ciscofirepower_management_centerMatch7.1.0.2

ciscofirepower_management_centerMatch7.2.0

VendorProductVersionCPE
ciscofirepower_management_center6.1.0cpe:2.3:a:cisco:firepower_management_center:6.1.0:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.1cpe:2.3:a:cisco:firepower_management_center:6.1.0.1:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.2cpe:2.3:a:cisco:firepower_management_center:6.1.0.2:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.3cpe:2.3:a:cisco:firepower_management_center:6.1.0.3:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.4cpe:2.3:a:cisco:firepower_management_center:6.1.0.4:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.5cpe:2.3:a:cisco:firepower_management_center:6.1.0.5:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.6cpe:2.3:a:cisco:firepower_management_center:6.1.0.6:*:*:*:*:*:*:*
ciscofirepower_management_center6.1.0.7cpe:2.3:a:cisco:firepower_management_center:6.1.0.7:*:*:*:*:*:*:*
ciscofirepower_management_center6.2.0cpe:2.3:a:cisco:firepower_management_center:6.2.0:*:*:*:*:*:*:*
ciscofirepower_management_center6.2.0.1cpe:2.3:a:cisco:firepower_management_center:6.2.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	firepower_management_center	6.1.0	cpe:2.3:a:cisco:firepower_management_center:6.1.0:::::::*
cisco	firepower_management_center	6.1.0.1	cpe:2.3:a:cisco:firepower_management_center:6.1.0.1:::::::*
cisco	firepower_management_center	6.1.0.2	cpe:2.3:a:cisco:firepower_management_center:6.1.0.2:::::::*
cisco	firepower_management_center	6.1.0.3	cpe:2.3:a:cisco:firepower_management_center:6.1.0.3:::::::*
cisco	firepower_management_center	6.1.0.4	cpe:2.3:a:cisco:firepower_management_center:6.1.0.4:::::::*
cisco	firepower_management_center	6.1.0.5	cpe:2.3:a:cisco:firepower_management_center:6.1.0.5:::::::*
cisco	firepower_management_center	6.1.0.6	cpe:2.3:a:cisco:firepower_management_center:6.1.0.6:::::::*
cisco	firepower_management_center	6.1.0.7	cpe:2.3:a:cisco:firepower_management_center:6.1.0.7:::::::*
cisco	firepower_management_center	6.2.0	cpe:2.3:a:cisco:firepower_management_center:6.2.0:::::::*
cisco	firepower_management_center	6.2.0.1	cpe:2.3:a:cisco:firepower_management_center:6.2.0.1:::::::*