Advisories · Technology

Cisco Firepower Management Center.

Every CVE that names Cisco Firepower Management Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-20832 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20831 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 10 Nov 2022
CVE-2022-20941 CVE record

CVSS 5.3 Medium

Cisco Firepower Management Center: A vulnerability in the web-based management interface of Cisco Firepower Management…
- Cisco Firepower Management Center
- CWE-334
Not analysed yet 10 Nov 2022
CVE-2022-20926 CVE record

CVSS 6.3 Medium

Command injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Command injection
Not analysed yet 10 Nov 2022
CVE-2022-20925 CVE record

CVSS 6.3 Medium

Command injection in Cisco Firepower Management Center
- Cisco Firepower Management Center
- Command injection
Not analysed yet 10 Nov 2022
CVE-2022-20854 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Cisco Firepower Management Center and others
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- Denial of service
Not analysed yet 10 Nov 2022
CVE-2022-20918 CVE record

CVSS 7.5 High

Improper access control in Cisco Firepower Management Center and others
- Cisco Firepower Management Center
- Cisco FirePOWER Services Software for ASA
- Broken access control
Not analysed yet 10 Nov 2022
CVE-2022-20744 CVE record

CVSS 4.3 Medium

Cisco Firepower Management Center Software Information Disclosure Vulnerability
- Cisco Firepower Management Center
- CWE-807
Not analysed yet 3 May 2022
CVE-2022-20627 CVE record

CVSS 5.4 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 3 May 2022
CVE-2022-20628 CVE record

CVSS 5.4 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 3 May 2022
CVE-2022-20629 CVE record

CVSS 5.4 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 3 May 2022
CVE-2022-20743 CVE record

CVSS 6.5 Medium

Cisco Firepower Management Center File Upload Security Bypass Vulnerability
- Cisco Firepower Management Center
- Unrestricted file upload
Not analysed yet 3 May 2022
CVE-2021-34764 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities
- Cisco Firepower Management Center
- Open redirect
Not analysed yet 27 Oct 2021
CVE-2021-34763 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities
- Cisco Firepower Management Center
- Open redirect
Not analysed yet 27 Oct 2021
CVE-2021-34762 CVE record

CVSS 8.1 High

Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability
- Cisco Firepower Management Center
- CWE-26
Not analysed yet 27 Oct 2021
CVE-2021-1477 CVE record

CVSS 4.3 Medium

Cisco Firepower Management Center Software Policy Vulnerability
- Cisco Firepower Management Center
- Broken access control
Not analysed yet 29 Apr 2021
CVE-2021-1458 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 29 Apr 2021
CVE-2021-1457 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 29 Apr 2021
CVE-2021-1456 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 29 Apr 2021
CVE-2021-1455 CVE record

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 29 Apr 2021
CVE-2021-1267 CVE record

CVSS 4.3 Medium

Cisco Firepower Management Center XML Entity Expansion Vulnerability
- Cisco Firepower Management Center
- Denial of service
Not analysed yet 13 Jan 2021
CVE-2021-1126 CVE record

CVSS 5.5 Medium

Cisco Firepower Management Center Information Disclosure Vulnerability
- Cisco Firepower Management Center
- CWE-256
Not analysed yet 13 Jan 2021
CVE-2021-1239 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2021
CVE-2021-1238 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2021
CVE-2020-3557 CVE record

CVSS 5.3 Medium

Cisco Firepower Management Center Software Denial of Service Vulnerability
- Cisco Firepower Management Center
- Weak cryptography or TLS
Not analysed yet 21 Oct 2020
CVE-2020-3558 CVE record

CVSS 4.7 Medium

Cisco Firepower Management Center Software Open Redirect Vulnerability
- Cisco Firepower Management Center
- Open redirect
Not analysed yet 21 Oct 2020
CVE-2020-3410 CVE record

CVSS 8.1 High

Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability
- Cisco Firepower Management Center
- Authentication bypass
Not analysed yet 21 Oct 2020
CVE-2020-3499 CVE record

CVSS 8.6 High

Cisco Firepower Management Center Software Denial of Service Vulnerability
- Cisco Firepower Management Center
- CWE-399
Not analysed yet 21 Oct 2020
CVE-2020-3515 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2020
CVE-2020-3549 CVE record

CVSS 8.1 High

Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability
- Cisco Firepower Management Center
- Weak cryptography or TLS
Not analysed yet 21 Oct 2020
CVE-2020-3550 CVE record

CVSS 8.1 High

Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability
- Cisco Firepower Management Center
- Path traversal
Not analysed yet 21 Oct 2020
CVE-2020-3553 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2020
CVE-2020-3320 CVE record

CVSS 5.4 Medium

Cisco Firepower Management Center Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2020
CVE-2019-16028 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass Vulnerability
- Cisco Firepower Management Center
- Authentication bypass
Not analysed yet 23 Sept 2020
CVE-2020-3307 CVE record

CVSS 5.3 Medium

Cisco Firepower Management Center Arbitrary Log File Write Vulnerability
- Cisco Firepower Management Center
- CWE-20
Not analysed yet 6 May 2020
CVE-2020-3302 CVE record

CVSS 6.8 Medium

Cisco Firepower Management Center File Overwrite Vulnerability
- Cisco Firepower Management Center
- CWE-20
Not analysed yet 6 May 2020
CVE-2020-3301 CVE record

CVSS 8.1 High

Cisco Firepower Management Center Static Credential Vulnerabilities
- Cisco Firepower Management Center
- Hard-coded credentials
Not analysed yet 6 May 2020
CVE-2020-3318 CVE record

CVSS 8.1 High

Cisco Firepower Management Center Static Credential Vulnerabilities
- Cisco Firepower Management Center
- Hard-coded credentials
Not analysed yet 6 May 2020
CVE-2020-3313 CVE record

CVSS 6.5 Medium

Cisco Firepower Management Center Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 6 May 2020
CVE-2020-3311 CVE record

CVSS 4.3 Medium

Cisco Firepower Management Center Open Redirect Vulnerability
- Cisco Firepower Management Center
- Open redirect
Not analysed yet 6 May 2020
CVE-2019-1982 CVE record

CVSS 5.8 Medium

Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability
- Cisco Firepower Management Center
- CWE-264
Not analysed yet 5 Nov 2019
CVE-2019-15280 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Software Stored Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2019
CVE-2019-15270 CVE record

CVSS 5.4 Medium

Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerability
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2019
CVE-2019-15269 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Multiple Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2019
CVE-2019-15268 CVE record

CVSS 4.8 Medium

Cisco Firepower Management Center Multiple Cross-Site Scripting Vulnerabilities
- Cisco Firepower Management Center
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2019
CVE-2019-12701 CVE record

CVSS 5.8 Medium

Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability
- Cisco Firepower Management Center
- CWE-20
Not analysed yet 2 Oct 2019
CVE-2019-12700 CVE record

CVSS 7.7 High

Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability
- Cisco Firepower Management Center
- Denial of service
Not analysed yet 2 Oct 2019
CVE-2019-12691 CVE record

CVSS 4.1 Medium

Cisco Firepower Management Center Directory Traversal Vulnerability
- Cisco Firepower Management Center
- Path traversal
Not analysed yet 2 Oct 2019
CVE-2019-12690 CVE record

CVSS 7.2 High

Cisco Firepower Management Center Command Injection Vulnerability
- Cisco Firepower Management Center
- Command injection
Not analysed yet 2 Oct 2019
CVE-2019-12689 CVE record

CVSS 7.5 High

Cisco Firepower Management Center Remote Code Execution Vulnerability
- Cisco Firepower Management Center
- CWE-20
Not analysed yet 2 Oct 2019
CVE-2019-12688 CVE record

CVSS 8.8 High

Cisco Firepower Management Center Remote Code Execution Vulnerability
- Cisco Firepower Management Center
- Memory corruption
Not analysed yet 2 Oct 2019
CVE-2019-12687 CVE record

CVSS 8.8 High

Cisco Firepower Management Center Remote Code Execution Vulnerability
- Cisco Firepower Management Center
- Memory corruption
Not analysed yet 2 Oct 2019
CVE-2019-12686 CVE record

CVSS 8.8 High

Cisco Firepower Management Center SQL Injection Vulnerabilities
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 2 Oct 2019
CVE-2019-12685 CVE record

CVSS 8.8 High

Cisco Firepower Management Center SQL Injection Vulnerabilities
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 2 Oct 2019
CVE-2019-12684 CVE record

CVSS 8.8 High

Cisco Firepower Management Center SQL Injection Vulnerabilities
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 2 Oct 2019
CVE-2019-12683 CVE record

CVSS 8.8 High

Cisco Firepower Management Center SQL Injection Vulnerabilities
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 2 Oct 2019
CVE-2019-12682 CVE record

CVSS 8.8 High

Cisco Firepower Management Center SQL Injection Vulnerabilities
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 2 Oct 2019
CVE-2019-12681 CVE record

CVSS 8.8 High

Cisco Firepower Management Center SQL Injection Vulnerabilities
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 2 Oct 2019
CVE-2019-12680 CVE record

CVSS 8.8 High

Cisco Firepower Management Center SQL Injection Vulnerabilities
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 2 Oct 2019
CVE-2019-12679 CVE record

CVSS 8.8 High

Cisco Firepower Management Center SQL Injection Vulnerabilities
- Cisco Firepower Management Center
- SQL injection
Not analysed yet 2 Oct 2019