CVE-2022-20743

CVE-2022-20743 affects Cisco Firepower Management Center (FMC) Web UI. The issue stems from improper validation when uploading files via the FMC web management interface, allowing an authenticated, remote attacker to upload malicious files, store them on the device, and potentially execute arbitr...

CVE-2021-34762

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an attacker to execute a cross-site scripting XSS attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an attacker to execute a cross-site scripting XSS attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-34764 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an attacker to execute a cross-site scripting XSS attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-34764

CVE-2021-34764 affects Cisco Firepower Management Center (FMC) web-based management interface, with multiple vulnerabilities enabling cross-site scripting (XSS) and open redirect attacks. The root cause is improper input validation of HTTP request parameters in the FMC web interface. Cisco’s advi...

CVE-2021-34763 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an attacker to execute a cross-site scripting XSS attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-34763

Cisco Firepower Management Center (FMC) Web UI vulnerabilities CVE-2021-34763: two issues—an authenticated attacker can lure a user to click a crafted link to execute arbitrary script code (XSS) and an unauthenticated attacker can exploit improper input validation to trigger an open redirect. The...

CVE-2021-34762

Cisco Firepower Management Center (FMC) Software is affected by CVE-2021-34762, a directory-traversal vulnerability in the web-based management interface caused by insufficient input validation of HTTPS URLs. An authenticated, remote attacker with valid credentials can send crafted HTTPS requests...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

CVE-2021-1477

Cisco Firepower Management Center (FMC) Software Policy vulnerability CVE-2021-1477 arises from insufficient enforcement of access control, allowing an authenticated, remote attacker to access internal services beyond their authorization and potentially overwrite policies or impact device configu...

CVE-2021-1458 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

CVE-2021-1458

Cisco Firepower Management Center (FMC) is affected by multiple XSS vulnerabilities in its web-based management interface due to insufficient validation of user input. An unauthenticated, remote attacker can lure a user into clicking a crafted link to execute arbitrary script code in the context ...

CVE-2021-1457

Cisco Firepower Management Center (FMC) Web-based management interface contains multiple cross-site scripting (XSS) vulnerabilities due to insufficient input validation. An unauthenticated, remote attacker can lure a user to click a crafted link, causing arbitrary script execution in the user’s b...

CVE-2021-1456

CVE-2021-1456 affects Cisco Firepower Management Center (FMC) Web UI. Root cause: insufficient validation of user-supplied input in the web-based management interface. A remote, unauthenticated attacker could lure a user to click a crafted link, enabling arbitrary script execution in the interfac...

CVE-2021-1455

CVE-2021-1455 relates to multiple cross-site scripting (XSS) vulnerabilities in Cisco Firepower Management Center (FMC) web-based management interface. The root cause is insufficient validation of user-supplied input in the FMC web UI, enabling an unauthenticated, remote attacker to persuade a us...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerabilities exist because the...

CVE-2021-1267

CVE-2021-1267 affects Cisco Firepower Management Center (FMC) dashboard widget and is due to improper restrictions on XML entities. An authenticated, remote attacker could exploit an XML-based widget on an affected FMC server to trigger increased memory and CPU usage, leading to a denial-of-servi...

CVE-2021-1126

CVE-2021-1126 affects Cisco Firepower Management Center (FMC). The issue is due to plaintext storage and weak permissions of proxy-server credentials in FMC configuration files, enabling an authenticated, local attacker to view credentials by accessing the CLI. The vulnerability’s impact is an in...

CVE-2021-1239

CVE-2021-1239 refers to multiple stored XSS vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). An authenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution or access to browser data due to inadequ...