Advisories · Technology

Cisco Firepower Management Center.

Every CVE that names Cisco Firepower Management Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-20220 CVE record

CVSS 6.0 Medium

OS command injection in Cisco Firepower Management Center and others
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- Command injection
Not analysed yet 14 Aug 2025
CVE-2025-20306 CVE record

CVSS 4.9 Medium

Cisco Secure Firewall Management Center Software Command Injection Vulnerability
- Cisco Firepower Management Center
- Command injection
Not analysed yet 14 Aug 2025
CVE-2025-20302 CVE record

CVSS 4.3 Medium

Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability
- Cisco Firepower Management Center
- Broken access control
Not analysed yet 14 Aug 2025
CVE-2025-20301 CVE record

CVSS 6.5 Medium

Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability
- Cisco Firepower Management Center
- Broken access control
Not analysed yet 14 Aug 2025
CVE-2025-20265 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability
- Cisco Firepower Management Center
- Other injection
Not analysed yet 14 Aug 2025
CVE-2025-20235 CVE record

CVSS 6.1 Medium

Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2025-20218 CVE record

CVSS 4.9 Medium

Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability
- Cisco Firepower Management Center
- Other injection
Not analysed yet 14 Aug 2025
CVE-2025-20148 CVE record

CVSS 8.5 High

Cisco Secure Firewall Management Center HTML Injection Vulnerability
- Cisco Firepower Management Center
- CWE-20
Not analysed yet 14 Aug 2025
CVE-2021-34751 CVE record

CVSS 4.3 Medium

Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability
- Cisco Firepower Management Center
- CWE-317
Not analysed yet 15 Nov 2024
CVE-2021-34750 CVE record

CVSS 4.3 Medium

Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability
- Cisco Firepower Management Center
- CWE-317
Not analysed yet 15 Nov 2024
CVE-2024-20482 CVE record

CVSS 6.5 Medium

Incorrect authorization in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Broken access control
Not analysed yet 23 Oct 2024
CVE-2024-20473 CVE record

CVSS 6.5 Medium

SQL injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 23 Oct 2024
CVE-2024-20472 CVE record

CVSS 6.5 Medium

SQL injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 23 Oct 2024
CVE-2024-20471 CVE record

CVSS 6.5 Medium

SQL injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 23 Oct 2024
CVE-2024-20424 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

OS command injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Command injection
Not analysed yet 23 Oct 2024
CVE-2024-20415 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20410 CVE record

CVSS 5.4 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20409 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20403 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20388 CVE record

CVSS 5.3 Medium

Cisco Firepower Management Center: A vulnerability in the password change feature of Cisco Firepower Management Center (FMC)…
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- CWE-202
Not analysed yet 23 Oct 2024
CVE-2024-20387 CVE record

CVSS 5.4 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20386 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20379 CVE record

CVSS 6.5 Medium

Path traversal in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Path traversal
Not analysed yet 23 Oct 2024
CVE-2024-20377 CVE record

CVSS 5.4 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20374 CVE record

CVSS 6.5 Medium

Improper privilege management in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Privilege escalation
Not analysed yet 23 Oct 2024
CVE-2024-20372 CVE record

CVSS 6.1 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20364 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20300 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20298 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20275 CVE record

CVSS 6.8 Medium

Cisco Secure Firewall Management Center Software Backup Cluster Command Injection Vulnerability
- Cisco Firepower Management Center
- Command injection
Not analysed yet 23 Oct 2024
CVE-2024-20274 CVE record

CVSS 5.5 Medium

Cisco Secure Firewall Management Center HTML Injection Vulnerability
- Cisco Firepower Management Center
- CWE-20
Not analysed yet 23 Oct 2024
CVE-2024-20273 CVE record

CVSS 6.1 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20269 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20264 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2024
CVE-2024-20360 CVE record

CVSS 8.8 High

SQL injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 22 May 2024
CVE-2024-20361 CVE record

CVSS 5.8 Medium

Cisco Firepower Management Center: A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco…
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- CWE-264
Not analysed yet 22 May 2024
CVE-2023-20063 CVE record

CVSS 8.2 High

Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- Code injection
Not analysed yet 1 Nov 2023
CVE-2023-20220 CVE record

CVSS 7.2 High

Path traversal in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Path traversal
Not analysed yet 1 Nov 2023
CVE-2023-20219 CVE record

CVSS 7.2 High

OS command injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Command injection
Not analysed yet 1 Nov 2023
CVE-2023-20048 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper privilege management in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Privilege escalation
Not analysed yet 1 Nov 2023
CVE-2023-20005 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-20074 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-20206 CVE record

CVSS 6.1 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-20041 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-20155 CVE record

CVSS 7.5 High

Resource allocation without limits in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Denial of service
Not analysed yet 1 Nov 2023
CVE-2023-20114 CVE record

CVSS 6.5 Medium

External control of a file path in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Path traversal
Not analysed yet 1 Nov 2023
CVE-2022-20938 CVE record

CVSS 4.3 Medium

XML external entity injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- XML external entities (XXE)
Not analysed yet 10 Nov 2022
CVE-2022-20936 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20935 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20932 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20905 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20872 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20843 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20840 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20839 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20838 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20836 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20835 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20834 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20833 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022