Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2020-27108)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center suffers from a cross-site scripting vulnerability that originates from the user interface not adequately validating user-submitted input. An attacker coul...

Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2020-27105)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An input validation error vulnerability exists in Cisco Firepower Management Center. An attacker could exploit this vulnerability by sending a specially crafted HTTP request to an affected...

Cisco Firepower Management Center Trust Management Issues Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center is vulnerable to a trust management issue that arises from a system account that uses a default static password that cannot be changed by the system...

Cisco Firepower Management Center File Overwrite Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A file overwrite vulnerability exists in the Web UI in versions prior to Cisco FMC Software Release 6.2.2.2, which can be exploited by a remote attacker to overwrite files on the file syst...

Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2020-27103)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An input validation error vulnerability exists in Cisco Firepower Management Center that stems from not properly validating HTTP request parameters. An attacker could exploit this...

CVE-2020-3313

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the FMC Software. The vulnerability is due to insufficient validatio...

CVE-2020-3301

Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...

CVE-2020-3318

Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...

CVE-2020-3307

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...

CVE-2020-3311

A vulnerability in the web interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this...

CVE-2020-3302

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to overwrite files on the file system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

Input validation

A vulnerability in the web interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this...

Design/Logic Flaw

Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...

Input validation

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to overwrite files on the file system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

CVE-2020-3307 Cisco Firepower Management Center Arbitrary Log File Write Vulnerability

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...

CVE-2020-3307 Cisco Firepower Management Center Arbitrary Log File Write Vulnerability

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...

CVE-2020-3302 Cisco Firepower Management Center File Overwrite Vulnerability

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to overwrite files on the file system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

CVE-2020-3302 Cisco Firepower Management Center File Overwrite Vulnerability

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to overwrite files on the file system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

CVE-2020-3301

CVE-2020-3301 relates to static credential vulnerabilities in Cisco Firepower Management Center (FMC) and Cisco Firepower User Agent Software. Connected sources (CISCO-SA-FMCUA-STATCRED-WEECCZCT, CVE listings, PT-2020-2510) describe the issue as involving hard-coded/static credentials or trust-ma...

CVE-2020-3318 Cisco Firepower Management Center Static Credential Vulnerabilities

Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...