CVE-2023-20114

CVE-2023-20114 concerns Cisco Firepower Management Center (FMC) and stems from insufficient input sanitation in the FMC file-download feature. Affected component: FMC software’s file download endpoint; root cause: lack of input validation could let an authenticated, remote attacker craft an HTTPS...

fmc-gac.com Cross Site Scripting vulnerability OBB-3314590

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cisco Firepower Threat Defense Software Privilege Escalation (cisco-sa-ftd-mgmt-privesc-7GqR2th)

A vulnerability in the management web server of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This vulnerability exists because access to HTTPS endpoints is not properly...

Cisco Firepower Management Center Software XSS Vulnerabilities (cisco-sa-fmc-xss-LATZYzxs)

The version of Cisco Firepower Management Center installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to...

CVE-2022-20936

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due t...

CVE-2022-20843

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due t...

CVE-2022-20838

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due t...

Input validation

A vulnerability in the web management interface of the Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to insufficient validation of user-supplied parameters for...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due t...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due t...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due t...

Authorization

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to missing authorization for certain resources in the web-based management interface...

CVE-2022-20938

A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to view sensitive information. This vulnerability is due to insufficient validation of the XML syntax when importing a...

CVE-2022-20938

Cisco Firepower Management Center (FMC) Software is affected by a vulnerability in the module import function of the administrative interface, caused by insufficient validation of XML syntax when importing a module. An authenticated, remote attacker could exploit a specially crafted XML file to r...

CVE-2022-20938

A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to view sensitive information. This vulnerability is due to insufficient validation of the XML syntax when importing a...

CVE-2022-20936

Cisco Firepower Management Center (FMC) web UI is affected by multiple CVE-2022-20936 XSS vulnerabilities due to insufficient input validation in the web-based management interface. An authenticated, remote attacker could inject crafted input to trigger stored XSS in FMC and potentially access se...

CVE-2022-20935

CVE-2022-20935 affects Cisco Firepower Management Center (FMC) web-based management interface. The issue is a stored cross-site scripting (XSS) vulnerability caused by insufficient validation of user-supplied input in various FMC data fields. An authenticated, remote attacker could inject crafted...

CVE-2022-20932

CVE-2022-20932 involves multiple stored XSS vulnerabilities in the Cisco Firepower Management Center (FMC) web-based management interface. The issues arise from insufficient validation of user-supplied input in data fields, allowing an authenticated, remote attacker to inject script code that run...

CVE-2022-20905

CVE-2022-20905 concerns Cisco Firepower Management Center (FMC) web-based management interface. The issue is a set of stored cross-site scripting (XSS) vulnerabilities caused by insufficient validation of user-supplied input in the FMC web UI. An authenticated, remote attacker could inject crafte...

CVE-2022-20872

Cisco Firepower Management Center (FMC) faces multiple stored XSS vulnerabilities in its web-based management interface due to insufficient validation of user input. An authenticated, remote attacker could supply crafted input in various FMC UI fields to execute script code within the interface o...