CVE-2020-3313

CVE-2020-3313 concerns Cisco Firepower Management Center (FMC) web UI. The vulnerability stems from insufficient validation of user-supplied input in the FMC web-based management interface, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by persuading a...

CVE-2020-3313 Cisco Firepower Management Center Cross-Site Scripting Vulnerability

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the FMC Software. The vulnerability is due to insufficient validatio...

CVE-2020-3311 Cisco Firepower Management Center Open Redirect Vulnerability

A vulnerability in the web interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this...

CVE-2020-3311 Cisco Firepower Management Center Open Redirect Vulnerability

A vulnerability in the web interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this...

Cisco Firepower Management Center Open Redirect Vulnerability

A vulnerability in the web interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this...

Cisco Firepower Management Center Arbitrary Log File Write Vulnerability

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...

Cisco Firepower Management Center File Overwrite Vulnerability

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to overwrite files on the file system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

PT-2020-2511 · Cisco · Cisco Firepower User Agent +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software that could allow ...

PT-2020-2518 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is due to insufficient input validation in the web UI of the software, allowing a remote attacker to send a crafted HTTP request to an...

PT-2020-2510 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue concerns multiple vulnerabilities in Cisco Firepower Management Center F...

PT-2020-2513 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to improper input validation of HTTP request parameters in the web interface, allowing an unauthenticated, remote attacker to...

Cisco Firepower Management Center Authorization Issues Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An authorization issue vulnerability exists in Cisco Firepower Management Center. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in...

The vulnerability of the web interface of Cisco Firepower Management Center software allows a perpetrator to perform arbitrary actions on the vulnerable device.

The vulnerability of the Cisco Firepower Management Center’s software network management interface is related to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device by sending specially crafted HTTP requests...

Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass (cisco-sa-20200122-fmc-auth)

According to its self-reported version, Cisco Firepower Management Center is affected by an authentication bypass vulnerability in the web-based management interface. This is due to improper handling of Lightweight Directory Access Protocol LDAP authentication responses from an external...

PT-2020-1393 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to bypass...

Vulnerabilities in the web interface of Cisco Firepower Management Center (FMC) software allow a perpetrator to carry out cross-site scripting attacks or gain unauthorized access to protected information.

Multiple vulnerabilities in the web interface of Cisco Firepower Management Center FMC software-related systems are associated with the lack of measures taken to protect the website structure. Exploitation of these vulnerabilities could allow a malicious actor to perform cross-site scripting...

Vulnerabilities in the web interface of Cisco Firepower Management Center (FMC) software allow a perpetrator to carry out cross-site scripting attacks or gain unauthorized access to protected information.

Multiple vulnerabilities in the web interface of Cisco Firepower Management Center FMC software-related systems are associated with the lack of measures taken to protect the website structure. Exploitation of these vulnerabilities could allow a malicious actor to perform cross-site scripting...

Multiple Cisco Products Privilege License and Access Control Issues Vulnerability (CNVD-2020-00298)

Cisco Firepower Management Center FMC and so on are the products of the United States Cisco Cisco company.Cisco Firepower Management Center is a new generation of firewall management center software.Cisco Firepower Threat Defense FTD is a set of unified software to provide next-generation firewal...

Multiple Cisco Products Privilege License and Access Control Issues Vulnerability (CNVD-2020-00293)

Cisco Firepower Management Center FMC and so on are the products of the United States Cisco Cisco company.Cisco Firepower Management Center is a new generation of firewall management center software.Cisco Firepower Threat Defense FTD is a set of unified software to provide next-generation firewal...

Multiple Cisco Products Privilege License and Access Control Issues Vulnerabilities

Cisco Firepower Management Center FMC and so on are the products of the United States Cisco Cisco company.Cisco Firepower Management Center is a new generation of firewall management center software.Cisco Firepower Threat Defense FTD is a set of unified software to provide next-generation firewal...