CVE-2019-12691 Cisco Firepower Management Center Directory Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient input validation by the web-based managemen...

CVE-2019-12691

Cisco Firepower Management Center (FMC) is affected by a directory traversal vulnerability in its web-based management interface due to insufficient input validation. An authenticated, remote attacker could send a crafted HTTP request to exploit this and bypass security restrictions to access the...

CVE-2019-12689

Cisco Firepower Management Center (FMC) web interface is vulnerable to unauthenticated input-validation errors that can enable remote code execution with high impact. Affected FMC versions include 6.1.0, 6.2.0, 6.2.1, 6.2.2 and 6.2.2.1 (per multiple sources); exploits require an authenticated rem...

CVE-2019-12687

CVE-2019-12687 affects Cisco Firepower Management Center (FMC) via the web UI. The root cause is insufficient input validation in the web UI, enabling an authenticated, remote attacker to execute arbitrary commands on the FMC. The issue is associated with FMC web UI components and has high impact...

CVE-2019-12688

CVE-2019-12688 affects Cisco Firepower Management Center (FMC) web UI. The vulnerability arises from insufficient input validation in the FMC web UI, allowing an authenticated, remote attacker to execute arbitrary commands on the affected device. The issue is evidenced across multiple sources (Ci...

CVE-2019-12686

CVE-2019-12686 concerns multiple SQL injection vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). The root cause is improper input validation, enabling an authenticated, remote attacker to send crafted SQL queries to the FMC backend. Impact statement...

CVE-2019-12685

Cisco Firepower Management Center (FMC) web-based management interface contains multiple SQL injection vulnerabilities due to improper input validation. An authenticated, remote attacker could craft SQL queries to view or modify data and potentially execute commands in the underlying OS, impactin...

CVE-2019-12684

Cisco Firepower Management Center (FMC) has multiple SQL injection vulnerabilities in its web-based management interface (CVE-2019-12684). Exploitation relies on improper input validation and authenticated remote access, enabling attackers to view or modify data and potentially execute commands o...

CVE-2019-12683

Cisco Firepower Management Center (FMC) web UI SQL injection vulnerabilities allow authenticated remote attackers to inject arbitrary SQL via improper input validation. Exploitation could disclose sensitive data, alter data, or execute commands on the underlying OS, potentially impacting availabi...

CVE-2019-12681

CVE-2019-12681 affects Cisco Firepower Management Center (FMC) web-based management interface. The vulnerabilities arise from improper input validation, enabling an authenticated, remote attacker to perform arbitrary SQL injections via crafted queries. Impact described in sources includes unautho...

CVE-2019-12681 Cisco Firepower Management Center SQL Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

CVE-2019-12682

CVE-2019-12682 affects Cisco Firepower Management Center (FMC) Software. The vulnerability set consists of multiple SQL injection flaws in the FMC web-based management interface caused by improper input validation. An authenticated, remote attacker could send crafted SQL queries to the FMC backen...

CVE-2019-12679

Cisco Firepower Management Center (FMC) exposes multiple SQL injection vulnerabilities in its web-based management interface due to improper input validation. An authenticated, remote attacker could send crafted SQL queries to the FMC backend, potentially viewing restricted data, altering configu...

CVE-2019-12680

CVE-2019-12680 covers multiple SQL injection vulnerabilities in Cisco Firepower Management Center (FMC) web-based management interface. Root cause: improper input validation allowing crafted SQL queries via authenticated remote access. Impact: an attacker could view restricted data, modify data, ...

Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability

A vulnerability in the configuration of the Pluggable Authentication Module PAM used in Cisco Firepower Threat Defense FTD Software, Cisco Firepower Management Center FMC Software, and Cisco FXOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. Th...

CVE-2019-12701: Improper Input Validation

A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass the file and malware inspection policies on an affected system. The vulnerability exists because the affected software...

CVE-2019-12681: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

CVE-2019-12689: Improper Input Validation

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is due to insufficient input validation. An...

CVE-2019-12685: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

CVE-2019-12691: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient input validation by the web-based managemen...