Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The vulnerability is due to insufficient validation of user-supplied input by the affected...

Cisco Firepower Management Center Information Disclosure Vulnerability (CNVD-2017-11426)

Cisco Firepower Management Center is a new generation of firewall management center software from the U.S. company Cisco Cisco. An information disclosure vulnerability exists in Cisco Firepower Management Center that stems from lengthy output in HTTP log files. An attacker could exploit this...

CVE-2017-6673

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. More Information: CSCvc10894. Known Affected Releases: 6.1.0.2 6.2.0. Known Fixed Releases: 6.2.0...

CVE-2017-6674

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1...

CVE-2017-6673

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. More Information: CSCvc10894. Known Affected Releases: 6.1.0.2 6.2.0. Known Fixed Releases: 6.2.0...

CVE-2017-6674

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1...

Design/Logic Flaw

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. More Information: CSCvc10894. Known Affected Releases: 6.1.0.2 6.2.0. Known Fixed Releases: 6.2.0...

Security feature bypass

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1...

CVE-2017-6673

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. More Information: CSCvc10894. Known Affected Releases: 6.1.0.2 6.2.0. Known Fixed Releases: 6.2.0...

CVE-2017-6674

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1...

CVE-2017-6673

Cisco Firepower Management Center (FMC) is affected by CVE-2017-6673. The issue is an information-disclosure vulnerability where an authenticated, remote attacker could obtain user information due to verbose HTTP log output. Affected releases include FMC 6.1.0.2 and 6.2.0; 6.2.0 is listed as fixe...

CVE-2017-6674

CVE-2017-6674 affects Cisco Firepower System Software in the feature-license management functionality, allowing an unauthenticated, remote attacker to bypass configured URL filters. The vulnerability arises from URL Filtering license handling, enabling the attacker to bypass URL filtering if traf...

PT-2017-17234 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center versions 6.1.0.2 through 6.2.0 Description: A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information, which could be used to perform...

PT-2017-17235

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions 6.0.1 through 6.2.1 Description A vulnerability in the feature-license management functionality could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an...

CVE-2017-6673: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. More Information: CSCvc10894. Known Affected Releases: 6.1.0.2 6.2.0. Known Fixed Releases: 6.2.0...

CVE-2017-6674: Improper Input Validation

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker could use this information to perform reconnaissance. The vulnerability is due to verbose output in HTTP log files. An attacker could retrieve the log files...

Cisco Firepower System Software Remote Security Bypass Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security vulnerability exists in the feature-license management feature of Cisco Firepower System Software, which stems from a URL filter license that can be disabled. A remote attacker could exploit this...

Cisco Firepower System Software URL Filtering Bypass Vulnerability

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...