The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

The vulnerability of the file loading function of Cisco Firepower Management Center (FMC) software allows a hacker to load any desired files.

The vulnerability of the file loading function of Cisco Firepower Management Center FMC software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to load any desired files...

The vulnerability of the TLS implementation in Cisco Firepower Threat Defense’s micro-programming network interface devices allows attackers to induce a service failure.

The vulnerability of the TLS protocol implementation in Cisco Firepower Threat Defense’s microprogramming network interfaces is related to improper memory allocation. Exploiting this vulnerability could allow a malicious actor to cause a service failure by triggering a reboot of the Snort intrusi...

The vulnerability of the application software interface of Cisco Firepower Management Center (FMC) allows a perpetrator to trigger a service failure.

The vulnerability of the application software interface of Cisco Firepower Management Center FMC relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending numerous HTTP requests remotely...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

The vulnerability of the implementation of TLS and SSL VPN client software from Cisco AnyConnect, which operates within the framework of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD), allows a perpetrator to cause service interruptions.

The vulnerability of the implementation of TLS and SSL VPN client software for Cisco AnyConnect by microprogramming-based network interface controllers from Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to improper cleaning or release of resources...

Multiple vulnerabilities in Cisco Firepower Management Center Software

Overview Cisco Firepower Management Center Software provided by Cisco Systems contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-20219 Path traversal CWE-22 - CVE-2023-20220 Kentaro Kawane of LAC Co., Ltd. reported these vulnerabilitis to IPA. JPCERT/CC...

JVN#17806703: Multiple vulnerabilities in Cisco Firepower Management Center Software

Cisco Firepower Management Center Software provided by Cisco Systems contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-20219 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H| Base Score: 6.6 CVSS v2|...

PT-2023-9598 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC affected versions not specified Description: The issue is related to a stored cross-site scripting XSS attack in the web-based management interface. This is due to the interface not properly validating...

PT-2023-9599 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the geolocation access control feature could allow an unauthenticated, remote attacker to bypass an access control policy. This issue ...

PT-2023-9589 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series affected versions not specified Description: A vulnerability in the software could allow an unauthenticated, local attacker to access an affecte...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center that stems from insufficient validation of user-supplied input in the web management interface, allowing an...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2023-85952)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center FMC suffers from a cross-site scripting vulnerability that originates from insufficient validation of user-supplied input in the web management interface,...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2023-85951)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center that originates from insufficient validation of user-supplied input in the web management interface and can...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves errors in privilege management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted HTTP requests remotely...

CVE-2023-20219

Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require...

CVE-2023-20070

A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability is due to a logic error in how memory allocations are handled during a...

CVE-2023-20220

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. To exploit these vulnerabilities, the attacker must have valid device...

CVE-2023-20083

A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the CPU of an affected device to spike to 100 percent, which could stop all traffic processing and result...