High severity · published Oct 5, 2016
CVE-2016-6419
SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors,…
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCur25485.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
Secure Firewall Management Center · Cisco
4.10.3; 5.2.0; 5.3.0; 5.3.1; 5.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6419
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6419
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fpmc
www.securityfocus.com
http://www.securityfocus.com/bid/93206
More from Secure Firewall Management Center
10.0
CVE-2026-20131
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
10.0
CVE-2026-20079
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
5.3
CVE-2026-20316
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
10.0
CVE-2025-20265
Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability
9.9
CVE-2024-20424
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an…