Cisco Firepower Threat Defense Software Web Services Interface Multiple Vulnerabilities (cisco-sa-asaftd-xss-multiple-FCB3vPZe)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

CVE-2020-3581

CVE-2020-3581 covers multiple cross-site scripting (XSS) vulnerabilities in the web services interface of Cisco ASA and FTD software. The flaws arise from insufficient validation of user-supplied input in the web services interface, allowing an unauthenticated, remote attacker to persuade a user ...