SF
Product
Secure Firewall Management Center
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 57Medium 122Low 0
Watch
Add Secure Firewall Management Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20316 RansomwareIn wildKEV | 5.3 | Jul 29 | Cisco Secure Firewall Management Center Software Static Credential Vulnerability Affected: 7.0.0 through 7.0.9; 7.2.0 through 7.2.11; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.7; 7.6.0 through 7.6.5; 7.7.0 through 7.7.12; +1 more |
| CVE-2018-15397 | 6.8 | Oct 5 | A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 6.2.2 |
| CVE-2020-3514 | 6.7 | Oct 21 | A vulnerability in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their Cisco… Affected: before 6.6.1 |
| CVE-2025-20301 | 6.5 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20482 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.3.1; +13 more |
| CVE-2024-20473 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +1 more |
| CVE-2024-20472 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +1 more |
| CVE-2024-20471 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20379 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2 |
| CVE-2024-20340 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +33 more |
| CVE-2023-20155 | 6.5 | Nov 1 | A vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause the device to become unresponsive or… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1; +1 more |
| CVE-2023-20114 | 6.5 | Nov 1 | A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1; +1 more |
| CVE-2022-20744 | 6.5 | May 3 | A vulnerability in the input protection mechanisms of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to view data without proper… Affected: before 7.1.0 |
| CVE-2019-12700 | 6.5 | Oct 2 | A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC)… Affected: through 6.1.0; 6.2.0 before 6.2.3.14; through 6.1.0; 6.2.0 before 6.2.3.14; 6.2.3 before 6.2.3.7 |
| CVE-2018-0278 | 6.5 | May 2 | A vulnerability in the management console of Cisco Firepower System Software could allow an unauthenticated, remote attacker to access sensitive data about the system Affected: 6.1.0; 6.2.0; 6.2.1; 6.2.2; 6.2.3 |
| CVE-2017-6673 | 6.5 | Jun 13 | A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information Affected: 6.1.0.2; 6.2.0 |
| CVE-2016-6435 | 6.5 | Oct 6 | The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376 Affected: 6.0.1 |
| CVE-2016-1413 | 6.5 | May 28 | The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka… Affected: 5.4.0; 5.4.0.2; 5.4.1; 5.4.1.1; 5.4.1.2; 5.4.1.3; +4 more |
| CVE-2025-20235 | 6.1 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20415 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20410 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20409 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20386 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20372 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20275 | 6.1 | Oct 23 | A vulnerability in the cluster backup feature of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +16 more |
| CVE-2024-20273 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20206 | 6.1 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.6.0 through 6.6.7.1; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.4; 7.3.0 through 7.3.1.1 |
| CVE-2023-20074 | 6.1 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1; +1 more |
| CVE-2023-20041 | 6.1 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.4.0.16; 6.6.7.1; 7.0.5; 7.1.0.3; 7.2.0; 7.2.0.1; +4 more |
| CVE-2023-20005 | 6.1 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1 |
| CVE-2022-20740 | 6.1 | May 3 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: before 6.6.5.2; 6.7.0 before 7.0.2; 7.1.0 before 7.1.0.1 |
| CVE-2020-3558 | 6.1 | Oct 21 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a… Affected: 6.2.0 through 6.2.3.16; 6.3.0 through 6.3.0.5; 6.4.0 through 6.4.0.9; 6.5.0 through 6.5.0.4 |
| CVE-2020-3553 | 6.1 | Oct 21 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: before 6.6.1 |
| CVE-2020-3515 | 6.1 | Oct 21 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: before 6.6.1 |
| CVE-2020-3313 | 6.1 | May 6 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: before 6.2.2.3 |
| CVE-2020-3311 | 6.1 | May 6 | A vulnerability in the web interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page Affected: before 6.3.0 |
| CVE-2019-1931 | 6.1 | Jul 6 | Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to… Affected: 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1930 | 6.1 | Jul 6 | Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to… Affected: 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1671 | 6.1 | Feb 7 | Cisco Firepower Management Center Cross-Site Scripting Vulnerability Affected: 6.0.0; 6.1.0; 6.2.0; 6.2.3; 6.2.3.6; 6.3.0; +1 more |
| CVE-2019-1642 | 6.1 | Jan 23 | Cisco Firepower Management Center Cross-Site Scripting Vulnerability Affected: 6.2.3; 6.3.0 |
| CVE-2017-12220 | 6.1 | Sep 7 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: All versions, or not specified |
| CVE-2016-6365 | 6.1 | Aug 23 | Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web… Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.0.2; 5.3.1; 5.4.0 |
| CVE-2016-1431 | 6.1 | Jun 18 | Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML… Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.1; 5.4.0 |
| CVE-2026-20044 | 6.0 | Mar 4 | Cisco Secure Firewall Management Center Command Injection Vulnerability Affected: 6.4.0 through 6.4.0.18; 7.0.0 through 7.0.8.1; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.10.2; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.3; +2 more |
| CVE-2017-3885 | 5.9 | Apr 7 | A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to… Affected: 6.0.0; 6.1.0; 6.2.0; 6.2.1 |
| CVE-2024-20361 | 5.8 | May 22 | A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +6 more |
| CVE-2019-1981 | 5.8 | Nov 5 | A vulnerability in the normalization functionality of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: 2.9.12 through 2.9.12.15; 2.9.13 through 2.9.13.6; 2.9.14.0 through 2.9.14.5; 2.9.15; 2.9.16 |
| CVE-2019-1978 | 5.8 | Nov 5 | A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: 2.9.12 through 2.9.12.15; 2.9.13 through 2.9.13.6; 2.9.14.0 through 2.9.14.5; 2.9.15; 2.9.16 |
| CVE-2019-12701 | 5.8 | Oct 2 | A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass the file… Affected: All versions, or not specified |
| CVE-2019-1833 | 5.8 | May 16 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol parser of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.1.0; 6.2.0; 6.2.1; 6.2.2; 6.2.3 |