CVE-2023-20155

A vulnerability in a logging API in Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to cause the device to become unresponsive or trigger an unexpected reload. This vulnerability could also allow an attacker with valid user credentials, but not...

CVE-2023-20206

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due...

CVE-2023-20041

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due...

CVE-2023-20063

Cisco Firepower Threat Defense (FTD) and Cisco Firepower Management Center (FMC) inter-device communication contains a code-injection vulnerability due to insufficient input validation. An authenticated, local attacker who gains admin privileges on an associated device can use expert mode to subm...

CVE-2023-20063 Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability

A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense FTD Software and devices that are running Cisco Firepower Management FMC Software could allow an authenticated, local attacker to execute arbitrary commands with root...

CVE-2023-20220

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. To exploit these vulnerabilities, the attacker must have valid device...

CVE-2023-20220

Cisco Firepower Management Center Software (FMC) contains CVE-2023-20220, a path traversal vulnerability caused by insufficient input validation in the web GUI configuration options. An authenticated, remote attacker with device credentials (no admin required) could exploit crafted input to execu...

CVE-2023-20220

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. To exploit these vulnerabilities, the attacker must have valid device...

CVE-2023-20219

Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require...

CVE-2023-20219

CVE-2023-20219 affects Cisco Firepower Management Center (FMC) Software: multiple OS command injection vulnerabilities in the web-based management interface. An authenticated attacker with valid credentials (no admin privileges required) can craft input in the GUI to execute arbitrary commands on...

CVE-2023-20048

CVE-2023-20048 describes a command-injection vulnerability in Cisco Firepower Management Center (FMC) web services. An authenticated attacker with FMC credentials can send crafted HTTP requests to an affected Firepower Threat Defense (FTD) device managed by FMC to execute unauthorized configurati...

CVE-2023-20005

CVE-2023-20005 concerns Cisco Firepower Management Center (FMC) Web UI vulnerabilities where insufficient validation of user-supplied input enables stored cross-site scripting. The issue affects the FMC web-based management interface and could allow an unauthenticated, remote attacker to insert c...

CVE-2023-20005

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due...

CVE-2023-20074

CVE-2023-20074 : Cisco Firepower Management Center (FMC) web-based management interface is affected by multiple stored XSS vulnerabilities caused by insufficient validation of user-supplied input. An unauthenticated, remote attacker could inject crafted input into data fields to execute arbitrary...

CVE-2023-20074

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due...

CVE-2023-20206

Cisco Firepower Management Center (FMC) web-based management interface is affected by stored cross-site scripting (XSS) vulnerabilities due to insufficient input validation. An unauthenticated, remote attacker could insert crafted input in various interface fields to execute arbitrary script code...

CVE-2023-20041

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due...

CVE-2023-20041

Cisco Firepower Management Center (FMC) web-based management interface is affected by multiple stored XSS vulnerabilities caused by insufficient validation of user-supplied input in the interface. Affects FMC software; attacker could exploit crafted input in various data fields to execute arbitra...

CVE-2023-20155

Summary: CVE-2023-20155 affects Cisco Firepower Management Center (FMC). The issue is a lack of rate-limiting on a logging API used by FMC, which can be exploited by an unauthenticated remote attacker to cause a DoS (CPU spiking to 100% and potential reload) or, with valid credentials but not Adm...

CVE-2023-20114

CVE-2023-20114 concerns Cisco Firepower Management Center (FMC) and stems from insufficient input sanitation in the FMC file-download feature. Affected component: FMC software’s file download endpoint; root cause: lack of input validation could let an authenticated, remote attacker craft an HTTPS...