Cross site scripting

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

CVE-2019-1930 Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

CVE-2019-1930 Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

CVE-2019-1930

Cisco Firepower Management Center (FMC) RSS dashboard web interface is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient validation of user input. An unauthenticated, remote attacker could lure a user into clicking a crafted link, potentially executing arbitrary ...

CVE-2019-1931 Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

CVE-2019-1931 Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

CVE-2019-1931

Cisco Firepower Management Center (FMC) RSS dashboard suffers cross-site scripting (XSS) due to insufficient input validation in the web-based management interface. The flaws allow an unauthenticated, remote attacker to lure a user into clicking a crafted link, enabling arbitrary script execution...

CVE-2019-1931: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

CVE-2019-1930: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-21303)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in the RSS dashboard of the web-based management interface in Cisco FMC, which stems from the web-based management interface failing to adequate...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-21297)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in the RSS dashboard of the web-based management interface in Cisco FMC, which stems from the web-based management interface failing to adequate...

Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

PT-2019-2656 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an unauthenticated, remote attacker...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability

According to its self-reported version, Adaptive Security Appliance Software or Cisco Firepower Threat Defense Software is affected by a vulnerability in the Deterministic Random Bit Generator DRBG, alsoknown as Pseudorandom Number Generator PRNG, used in Cisco Adaptive Security Appliance ASA...

Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by following vulnerability - A vulnerability in the detection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control...

Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by following vulnerability - A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol parser of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remo...

Cisco Firepower Management Center 6.2.3.x < 6.2.3.12 / 6.3.0.x < 6.3.0.3 / 6.4.0 XSS (cisco-sa-20190417-cfmc-xss)

According to its self-reported version, the Cisco Firepower Management Center is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to...

Cisco Firepower Management Center 6.2.3.x < 6.2.3.10 / 6.3.0.x < 6.3.0.1 / 6.4.0 XSS (cisco-sa-20190206-fmc-xss)

According to its self-reported version, the Cisco Firepower Management Center is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to...

The vulnerability in the syntax analyzer of Cisco Firepower Management Center’s network management software for Secure Sockets Layer (SSL) and Transport Layer Security (TLS protocols allows a perpetrator to bypass existing access control policies.

The vulnerability in the syntax analyzer of Cisco Firepower Management Center’s network management software for Secure Sockets Layer SSL and Transport Layer Security TLS protocols is related to errors in analyzing attributes in TLS packet headers. Exploiting this vulnerability can allow a malicio...

The vulnerability of Cisco Firepower Management Center’s network management software, related to ICMP packet inspection errors, allows attackers to circumvent existing access control policies.

The vulnerability of Cisco Firepower Management Center’s network management software is related to ICMP packet inspection errors. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies...