CVE-2021-34749

CVE-2021-34749 affects Cisco WSA/FTD and the Snort detection engine. The issue stems from inadequate filtering of the SSL handshake in the SNI data path, allowing an unauthenticated remote attacker to bypass filters and exfiltrate data from a compromised host, potentially enabling command-and-con...

CVE-2019-15269

CVE-2019-15269 concerns multiple cross-site scripting (XSS) vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). The root cause is insufficient validation of user-supplied input in the FMC web interface, allowing an authenticated, remote attacker to tr...

CVE-2019-15268

Cisco Firepower Management Center (FMC) web-based management interface contains multiple Cross-Site Scripting (XSS) vulnerabilities (CVE-2019-15268) due to insufficient validation of user-supplied input. An authenticated, remote attacker can lure a user to click a crafted link, causing arbitrary ...