CVE-2019-1931

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

Cross site scripting

Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

CVE-2019-1930

Cisco Firepower Management Center (FMC) RSS dashboard web interface is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient validation of user input. An unauthenticated, remote attacker could lure a user into clicking a crafted link, potentially executing arbitrary ...

CVE-2019-1931

Cisco Firepower Management Center (FMC) RSS dashboard suffers cross-site scripting (XSS) due to insufficient input validation in the web-based management interface. The flaws allow an unauthenticated, remote attacker to lure a user into clicking a crafted link, enabling arbitrary script execution...

CVE-2019-1802

Cisco Firepower Management Center (FMC) is affected by CVE-2019-1802: an authenticated, remote attacker can exploit a cross-site scripting (XSS) vulnerability due to insufficient validation of input in the web-based management interface. A successful exploit requires a user to view a report conta...

CVE-2019-1671

CVE-2019-1671 concerns the Cisco Firepower Management Center (FMC) web-based management interface. It describes an XSS vulnerability caused by insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to lure a user into clicking a malicious link and potentially...

Cisco Firepower Management Center 6.2.2.2 / 6.2.3 - Cross-Site Scripting

Exploit Title: Cisco Firepower Management Center Cross-Site Scripting XSS Vulnerability Google Dork: N/A Date: 23-01-2019 Exploit Author: Bhushan B. Patil Advisory URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-frpwr-mc-xss Affected Version: 6.2.2.2 &...

CVE-2019-1642

CVE-2019-1642 affects Cisco Firepower Management Center (FMC). The issue is a cross-site scripting (XSS) vulnerability in the web-based management interface caused by insufficient validation of user-supplied input. An unauthenticated, remote attacker could lure a user to click a crafted link, ena...

Race condition

A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center FMC, when used in conjunction with remote authentication, could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occur...

CVE-2018-15458

Cisco Firepower Management Center (FMC) Shell Access Filter vulnerability allows an unauthenticated, remote attacker to trigger unbounded writes to a system log file when used with certain remote authentication configurations. This can cause high disk utilization, leading to a DoS and instability...

Input validation

A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense FTD sensors could allow an authenticated, local attacker to execute specific CLI commands with root privileges on the Cisco Firepower Management Center FM...

CVE-2018-0453 Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability

A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense FTD sensors could allow an authenticated, local attacker to execute specific CLI commands with root privileges on the Cisco Firepower Management Center FM...

CVE-2018-0453

Cisco Firepower Management Center and Firepower System Software (FTD sensors) are affected by CVE-2018-0453. The issue stems from insufficient validation of CLI commands sent via the Sourcefire tunnel control channel, allowing an authenticated, local attacker with root privileges on at least one ...

CVE-2018-0453 Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability

A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense FTD sensors could allow an authenticated, local attacker to execute specific CLI commands with root privileges on the Cisco Firepower Management Center FM...

CVE-2017-3809

CVE-2017-3809 affects Cisco Firepower Management Center (FMC) Policy deployment module. An unauthenticated, remote attacker could exploit a flaw in the rules engine (lack of condition checks) to prevent deployment of a complete and accurate rule base by spoofing Object IDs of Port objects. Affect...

Cisco Firepower Management Center (FMC) Detection Consolidation

Consolidation of Cisco Firepower Management Center FMC detections. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...