Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2024-43204)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, which arises from insufficient validation of user-supplied input in the web management interface, and can ...

The vulnerability of the access control function for geolocation in Cisco Firepower Threat Defense’s microprogramming operating system allows a hacker to circumvent security restrictions.

The vulnerability of the access control function for geolocation in Cisco Firepower Threat Defense FTD software relates to incorrect handling of values. Exploiting this vulnerability can allow an attacker operating remotely to circumvent security restrictions...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface for managing Cisco Firepower Management Center software allows a hacker to read arbitrary files.

The vulnerability in the web interface for managing Cisco Firepower Management Center FMC software involves incorrect restrictions on the path name to the directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

The vulnerability of the command-line interface of Cisco Firepower Threat Defense (FTD) software allows a malicious actor to gain unauthorized access to read, modify, or delete data, or to cause a service failure.

The vulnerability of the command-line interface of Cisco Firepower Threat Defense FTD microprogramming systems is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or cause servic...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute arbitrary commands in the basic operating system.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves the failure to take measures to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on...

The vulnerability in the web interface for managing Cisco Firepower Management Center software allows a perpetrator to execute arbitrary commands.

The vulnerability of the web-based interface for managing Cisco Firepower Management Center FMC software involves deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability in the web interface for managing microprogramming software-based Cisco Firepower Threat Defense (FTD) allows a attacker to execute cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Cisco Firepower Management Center WEB Management Cross-Site Scripting Vulnerability

Cisco Firepower Management Center is a new generation of firewall management center software from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the Cisco Firepower Management Center WEB interface, which can be exploited by a remote attacker to inject malicious scrip...

The vulnerability of the Remote Access VPN service provided by microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a perpetrator to induce a service failure.

The vulnerability of the Remote Access VPN service RAVPN of the micro-programming network interface devices from Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the inability to release resources after their useful life has expired. Exploiting this...

Vulnerabilities fixed in Cisco Adaptive Security Appliance and Firepower Threat Defense

Cisco has fixed vulnerabilities in Adaptive Security Appliance ASA and Firepower Threat Defense FTD. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service on the system, disrupting the underlying service, bypassing implemented security measures to enable unauthorized...

CVE-2024-20495

A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition on an...

CVE-2024-20494

A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

CVE-2024-20493

A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to deny further VPN user authentications for several...

CVE-2024-20426

A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for VPN termination of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

CVE-2024-20431

A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass an access control policy. This vulnerability is due to improper assignment of geolocation data. An attacker could exploit this...

CVE-2024-20426

A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for VPN termination of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

CVE-2024-20431

A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass an access control policy. This vulnerability is due to improper assignment of geolocation data. An attacker could exploit this...

CVE-2024-20415

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient...

CVE-2024-20424

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability ...