CVE-2021-1239: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerabilities exist because the...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

CISCO CVE-2020-3452 Scanner & Exploiter It will scan the targ...

Cisco Firepower Management Center Web Interface Redirect

The vulnerability of the Cisco Firepower Management Center’s web interface software is related to errors in processing URL addresses. Exploiting this vulnerability allows a malicious actor to redirect users to any arbitrary URL address...

Cisco Firepower Management Center Arbitrary File Read (CVE-2016-6435)

A vulnerability exists in Cisco Firepower Management Center. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Cisco Firepower Management Center XSS

The vulnerability of the Cisco Firepower Management Center’s software network management web interface is related to errors during the validation of data entered through the web interface. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Cisco FXOS CSRF

The vulnerability of the monitoring and management interface of the Cisco OS on the Cisco Firepower network switch involves insufficient protection when entering CSRF requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

Cisco Firepower Management Center’s DoS

The vulnerability of the Cisco Firepower Management Center’s network interface licensing service is related to errors in resource management. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco Firepower Management Center sftunnel Hash Disclosure

The vulnerability of the sftunnel function in Cisco Firepower Management Center FMC and Cisco Firepower Threat Defense FTD is related to encryption errors. Exploiting this vulnerability can allow a malicious actor to obtain a device’s registration hash...

Cisco Firepower Management Center Network Interface File Read/Write

The vulnerability of the sftunnel in Cisco Firepower Management Center FMC and Cisco Firepower Threat Defense FTD relates to the possibility of path traversal. Exploiting this vulnerability allows a malicious actor to read or write arbitrary files on a peer-to-peer device connected to the sftunne...

Cisco ASA Firepower Threat Defense Secure Loading Bypass

The vulnerability of the secure loading process for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to failures in the security mechanisms. Exploiting this vulnerability can allow attackers to bypass the secure loading mechanism...

Cisco FXOS Secure Boot Bypass

The vulnerability of the Cisco FXOS operating system’s secure boot process is related to deficiencies in the security measures of that process. Exploiting this vulnerability could allow attackers to circumvent the secure boot mechanism...

Cisco Firepower Threat Defense TLS Session Unauthorized Access

The vulnerability of TLS session handler microprogramming software for Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance is related to information disclosure due to incompatibility issues. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to...

Cisco Firepower Threat Defense FTP Verification Unauthorized Access

The vulnerability of the FTP verification mechanism implemented by Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

Snort intrusion detection system Security Bypass

The vulnerability of the Snort intrusion detection system, the microprogramming software for Cisco Firepower Threat Defense FTD, the program-defined network Cisco SD-WAN, the Cisco IOS XE network operating system, and the microprogramming software for Cisco Meraki devices is related to a flaw in...

Cisco Firepower Management Center XSS

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Cisco Firepower Management Center DoS

The vulnerability of Cisco Firepower Management Center’s software management system is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco Firepower Threat Defense XSS

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in the insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site attac...

Cisco Firepower Threat Defense XSS

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site scripting...

Cisco Firepower Threat Defense Clientless SSL VPN HTTP Header Injection

The vulnerability of the Clientless SSL VPN WebVPN implementation of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA is related to the failure to implement measures to neutralize CRLF sequences. Exploiting this vulnerability allows a malicious actor to inject arbitrar...

Cisco Firepower Threat Defense Web Interface Unauthorized Access

The vulnerability of the web-based interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected informatio...