Cisco Secure Firewall Management Center vulnerabilities
183 known vulnerabilities affecting cisco/secure_firewall_management_center.
Total CVEs
183
CISA KEV
3
actively exploited
Public exploits
7
Exploited in wild
3
Severity breakdown
CRITICAL7HIGH57MEDIUM119
Vulnerabilities
Page 9 of 10
CVE-2021-1456P4MEDIUMCVSS 4.8≤ 6.4.0.11≥ 6.5.0, < 6.6.3+1 more2021-04-29
CVE-2021-1456 [MEDIUM] CWE-79 CVE-2021-1456: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management inte
nvd
CVE-2021-1458P4MEDIUMCVSS 4.8≤ 6.4.0.11≥ 6.5.0, < 6.6.3+1 more2021-04-29
CVE-2021-1458 [MEDIUM] CWE-79 CVE-2021-1458: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management inte
nvd
CVE-2021-1457P4MEDIUMCVSS 4.8≤ 6.4.0.11≥ 6.5.0, < 6.6.3+1 more2021-04-29
CVE-2021-1457 [MEDIUM] CWE-79 CVE-2021-1457: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management inte
nvd
CVE-2022-20932P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20932 [MEDIUM] CWE-79 CVE-2022-20932: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20832P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20832 [MEDIUM] CWE-79 CVE-2022-20832: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20835P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20835 [MEDIUM] CWE-79 CVE-2022-20835: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20843P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20843 [MEDIUM] CWE-79 CVE-2022-20843: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20833P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20833 [MEDIUM] CWE-79 CVE-2022-20833: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20840P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20840 [MEDIUM] CWE-79 CVE-2022-20840: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20831P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20831 [MEDIUM] CWE-79 CVE-2022-20831: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20839P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20839 [MEDIUM] CWE-79 CVE-2022-20839: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20935P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20935 [MEDIUM] CWE-79 CVE-2022-20935: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20905P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20905 [MEDIUM] CWE-79 CVE-2022-20905: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20834P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20834 [MEDIUM] CWE-79 CVE-2022-20834: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20836P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20836 [MEDIUM] CWE-79 CVE-2022-20836: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20838P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20838 [MEDIUM] CWE-79 CVE-2022-20838: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20936P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20936 [MEDIUM] CWE-79 CVE-2022-20936: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2022-20872P4MEDIUMCVSS 4.8v6.1.0v6.1.0.1+90 more2022-11-15
CVE-2022-20872 [MEDIUM] CWE-79 CVE-2022-20872: Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device.
These vulnerabilities are due to insufficient validation of user-supplied input by
nvd
CVE-2019-1802P4MEDIUMCVSS 4.8v6.2.3v6.3.0+1 more2019-04-18
CVE-2019-1802 [MEDIUM] CWE-79 CVE-2019-1802: A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) cou
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input in the web-ba
nvd
CVE-2019-15280P4MEDIUMCVSS 4.8v6.2.0v6.2.3+3 more2019-10-16
CVE-2019-15280 [MEDIUM] CWE-79 CVE-2019-15280: A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Sof
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based
nvd