CVE-2021-34763

Cisco Firepower Management Center (FMC) Web UI vulnerabilities CVE-2021-34763: two issues—an authenticated attacker can lure a user to click a crafted link to execute arbitrary script code (XSS) and an unauthenticated attacker can exploit improper input validation to trigger an open redirect. The...

CVE-2021-34762

Cisco Firepower Management Center (FMC) Software is affected by CVE-2021-34762, a directory-traversal vulnerability in the web-based management interface caused by insufficient input validation of HTTPS URLs. An authenticated, remote attacker with valid credentials can send crafted HTTPS requests...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

CVE-2021-1477

Cisco Firepower Management Center (FMC) Software Policy vulnerability CVE-2021-1477 arises from insufficient enforcement of access control, allowing an authenticated, remote attacker to access internal services beyond their authorization and potentially overwrite policies or impact device configu...

CVE-2021-1458 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

CVE-2021-1458

Cisco Firepower Management Center (FMC) is affected by multiple XSS vulnerabilities in its web-based management interface due to insufficient validation of user input. An unauthenticated, remote attacker can lure a user into clicking a crafted link to execute arbitrary script code in the context ...

CVE-2021-1457

Cisco Firepower Management Center (FMC) Web-based management interface contains multiple cross-site scripting (XSS) vulnerabilities due to insufficient input validation. An unauthenticated, remote attacker can lure a user to click a crafted link, causing arbitrary script execution in the user’s b...

CVE-2021-1456

CVE-2021-1456 affects Cisco Firepower Management Center (FMC) Web UI. Root cause: insufficient validation of user-supplied input in the web-based management interface. A remote, unauthenticated attacker could lure a user to click a crafted link, enabling arbitrary script execution in the interfac...

CVE-2021-1455

CVE-2021-1455 relates to multiple cross-site scripting (XSS) vulnerabilities in Cisco Firepower Management Center (FMC) web-based management interface. The root cause is insufficient validation of user-supplied input in the FMC web UI, enabling an unauthenticated, remote attacker to persuade a us...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerabilities exist because the...

CVE-2021-1267

CVE-2021-1267 affects Cisco Firepower Management Center (FMC) dashboard widget and is due to improper restrictions on XML entities. An authenticated, remote attacker could exploit an XML-based widget on an affected FMC server to trigger increased memory and CPU usage, leading to a denial-of-servi...

CVE-2021-1126

CVE-2021-1126 affects Cisco Firepower Management Center (FMC). The issue is due to plaintext storage and weak permissions of proxy-server credentials in FMC configuration files, enabling an authenticated, local attacker to view credentials by accessing the CLI. The vulnerability’s impact is an in...

CVE-2021-1239

CVE-2021-1239 refers to multiple stored XSS vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). An authenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution or access to browser data due to inadequ...

CVE-2021-1238

Cisco Firepower Management Center (FMC) web-based management interface is affected by multiple stored XSS vulnerabilities. The issue arises from insufficient input validation, allowing an authenticated, remote attacker to lure a user into clicking a crafted link to execute arbitrary script code o...

CVE-2021-1238 Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerabilities exist because the...

Cisco Firepower Management Center XML Entity Expansion Vulnerability

A vulnerability in the dashboard widget of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit th...

CVE-2020-3549

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center FMC Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to obtain the device registration hash. The vulnerability is due to insufficient sftunnel negotiation...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

Design/Logic Flaw

A vulnerability in the host input API daemon of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit...

Design/Logic Flaw

A vulnerability in the licensing service of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition.The vulnerability is due to improper handling of system resource values by the affected system. An attacker could...