Cisco FMC Software Pluggable Authentication Module DoS (cisco-sa-20191002-ftd-fpmc-dos)

According to its self-reported version, Cisco Firepower Management Center FMC Software is affected by a vulnerability in the configuration of the Pluggable Authentication Module PAM due to improper resource management in the context of user session management. An authenticated, remote attacker ca...

Cisco Warns of Critical Network Security Tool Flaw

A critical Cisco vulnerability exists in its administrative management tool for Cisco network security solutions. The flaw could allow an unauthenticated, remote attacker to gain administrative privileges on impacted devices. The flaw exists in the web-based management interface of the Cisco...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of...

CVE-2019-15270 Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of...

CVE-2019-15270

Cisco Firepower Management Center (FMC) web-based management interface is affected by a stored cross-site scripting (XSS) vulnerability (CVE-2019-15270) due to insufficient validation of user-supplied input. An unauthenticated/remote attacker can persuade a user to click a crafted link, potential...

CVE-2019-15268

Cisco Firepower Management Center (FMC) web-based management interface contains multiple Cross-Site Scripting (XSS) vulnerabilities (CVE-2019-15268) due to insufficient validation of user-supplied input. An authenticated, remote attacker can lure a user to click a crafted link, causing arbitrary ...

CVE-2019-15269

CVE-2019-15269 concerns multiple cross-site scripting (XSS) vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). The root cause is insufficient validation of user-supplied input in the FMC web interface, allowing an authenticated, remote attacker to tr...

CVE-2019-12701

A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass the file and malware inspection policies on an affected system. The vulnerability exists because the affected software...

CVE-2019-12681

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

Input validation

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is due to insufficient input validation. An...

Input validation

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

Race condition

A vulnerability in the configuration of the Pluggable Authentication Module PAM used in Cisco Firepower Threat Defense FTD Software, Cisco Firepower Management Center FMC Software, and Cisco FXOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. Th...

Input validation

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user of the underlying operating system. The vulnerability is due to insufficient validation of...

CVE-2019-12701

Cisco Firepower Management Center (FMC) Software is affected by CVE-2019-12701, a file and malware inspection policy bypass vulnerability. The issue arises from insufficient validation of incoming traffic, allowing an unauthenticated, remote attacker to bypass file and malware inspection policies...

CVE-2019-12700 Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability

A vulnerability in the configuration of the Pluggable Authentication Module PAM used in Cisco Firepower Threat Defense FTD Software, Cisco Firepower Management Center FMC Software, and Cisco FXOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. Th...

CVE-2019-12700

The CVE-2019-12700 issue affects Cisco Firepower Threat Defense (FTD), Cisco Firepower Management Center (FMC), and Cisco FXOS Software. It is caused by improper resource management in PAM user session handling, enabling an authenticated remote attacker to exhaust system resources by initiating m...

CVE-2019-12700 Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability

A vulnerability in the configuration of the Pluggable Authentication Module PAM used in Cisco Firepower Threat Defense FTD Software, Cisco Firepower Management Center FMC Software, and Cisco FXOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. Th...

CVE-2019-12690

CVE-2019-12690 is a command-injection flaw in the Cisco Firepower Management Center (FMC) web UI. An authenticated, remote attacker can submit crafted input via the UI to execute arbitrary commands with root privileges on the underlying OS, due to insufficient validation of user-supplied input. T...

CVE-2019-12691 Cisco Firepower Management Center Directory Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient input validation by the web-based managemen...

CVE-2019-12691

Cisco Firepower Management Center (FMC) is affected by a directory traversal vulnerability in its web-based management interface due to insufficient input validation. An authenticated, remote attacker could send a crafted HTTP request to exploit this and bypass security restrictions to access the...