CVE-2020-3307

CVE-2020-3307 affects Cisco Firepower Management Center (FMC) Web UI. It enables an unauthenticated, remote attacker to write arbitrary entries to the device log via a crafted HTTP request due to insufficient input validation. Impact per docs is log data manipulation; exploitation is via network ...

CVE-2020-3302

CVE-2020-3302 refers to a vulnerability in the web UI of Cisco Firepower Management Center (FMC) where insufficient input validation lets an authenticated, remote attacker upload a crafted file to overwrite files on the device’s filesystem. The issue is documented across multiple sources (Cisco a...

CVE-2020-3301

CVE-2020-3301 relates to static credential vulnerabilities in Cisco Firepower Management Center (FMC) and Cisco Firepower User Agent Software. Connected sources (CISCO-SA-FMCUA-STATCRED-WEECCZCT, CVE listings, PT-2020-2510) describe the issue as involving hard-coded/static credentials or trust-ma...

CVE-2020-3318

CVE-2020-3318 affects Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software. The issue is described as multiple vulnerabilities enabling an unauthenticated, remote attacker to access a sensitive part of an affected system with a high-privileged account via stati...

CVE-2020-3313

CVE-2020-3313 concerns Cisco Firepower Management Center (FMC) web UI. The vulnerability stems from insufficient validation of user-supplied input in the FMC web-based management interface, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by persuading a...

CVE-2020-3311

CVE-2020-3311 concerns the web interface of Cisco Firepower Management Center (FMC). The issue arises from improper input validation of HTTP request parameters, enabling an unauthenticated, remote attacker to intercept/modify a user’s HTTP request and redirect the user to a malicious web page. Co...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability

A vulnerability in the Open Shortest Path First OSPF implementation in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to incorrect...

Cisco FMC Software Pluggable Authentication Module DoS (cisco-sa-20191002-ftd-fpmc-dos)

According to its self-reported version, Cisco Firepower Management Center FMC Software is affected by a vulnerability in the configuration of the Pluggable Authentication Module PAM due to improper resource management in the context of user session management. An authenticated, remote attacker ca...

Cisco Warns of Critical Network Security Tool Flaw

A critical Cisco vulnerability exists in its administrative management tool for Cisco network security solutions. The flaw could allow an unauthenticated, remote attacker to gain administrative privileges on impacted devices. The flaw exists in the web-based management interface of the Cisco...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of...

CVE-2019-15270 Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of...

CVE-2019-15270

Cisco Firepower Management Center (FMC) web-based management interface is affected by a stored cross-site scripting (XSS) vulnerability (CVE-2019-15270) due to insufficient validation of user-supplied input. An unauthenticated/remote attacker can persuade a user to click a crafted link, potential...

CVE-2019-15269

CVE-2019-15269 concerns multiple cross-site scripting (XSS) vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). The root cause is insufficient validation of user-supplied input in the FMC web interface, allowing an authenticated, remote attacker to tr...

CVE-2019-15268

Cisco Firepower Management Center (FMC) web-based management interface contains multiple Cross-Site Scripting (XSS) vulnerabilities (CVE-2019-15268) due to insufficient validation of user-supplied input. An authenticated, remote attacker can lure a user to click a crafted link, causing arbitrary ...

CVE-2019-12701

A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass the file and malware inspection policies on an affected system. The vulnerability exists because the affected software...

CVE-2019-12681

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

Input validation

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is due to insufficient input validation. An...

Input validation

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

Input validation

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user of the underlying operating system. The vulnerability is due to insufficient validation of...

Race condition

A vulnerability in the configuration of the Pluggable Authentication Module PAM used in Cisco Firepower Threat Defense FTD Software, Cisco Firepower Management Center FMC Software, and Cisco FXOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. Th...