CVE-2019-15268

Cisco Firepower Management Center (FMC) web-based management interface contains multiple Cross-Site Scripting (XSS) vulnerabilities (CVE-2019-15268) due to insufficient validation of user-supplied input. An authenticated, remote attacker can lure a user to click a crafted link, causing arbitrary ...

CVE-2019-15269

CVE-2019-15269 concerns multiple cross-site scripting (XSS) vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). The root cause is insufficient validation of user-supplied input in the FMC web interface, allowing an authenticated, remote attacker to tr...

CVE-2018-0365

Cisco Firepower Management Center’s web-based management interface is affected by a CSRF vulnerability due to insufficient CSRF protections. An unauthenticated, remote attacker could lure a user into clicking a malicious link and perform arbitrary actions in the web UI with the user’s privileges....