SF
Product
Secure Firewall Management Center
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 57Medium 122Low 0
Watch
Add Secure Firewall Management Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1223 | 7.5 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: 2.9.14.0; 2.9.15; 2.9.16 |
| CVE-2020-3312 | 7.5 | May 6 | A vulnerability in the application policy configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read… Affected: 6.2.3; 6.2.3.10; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1970 | 7.5 | Aug 8 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.3.0; 6.4.0 |
| CVE-2019-1832 | 7.5 | May 16 | A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control… Affected: 6.2.0; 6.2.0.5; 6.2.3; 6.2.3.1; 6.2.3.2; 6.4.0 |
| CVE-2018-15458 | 7.5 | Jan 10 | A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction with remote authentication, could allow an unauthenticated,… Affected: 6.2.2; 6.2.3; 6.3.0 |
| CVE-2018-0385 | 7.5 | Jul 16 | A vulnerability in the detection engine parsing of Security Socket Layer (SSL) protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker… Affected: 5.4.0; 6.0.0; 6.1.0; 6.2.0; 6.2.2; 6.2.3; +1 more |
| CVE-2018-0370 | 7.5 | Jul 16 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause one of the detection engine processes to run… Affected: 6.1.0.7; 6.2.0.5; 6.2.2.2 |
| CVE-2016-9193 | 7.5 | Dec 14 | A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated,… Affected: 6.0.0; 6.0.0.0; 6.0.0.1; 6.0.1; 6.0.1.1; 6.1.0 |
| CVE-2016-6439 | 7.5 | Oct 27 | A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a… Affected: 5.3.0; 5.3.0.2; 5.3.0.3; 5.3.0.4; 5.3.1; 5.3.1.3; +18 more |
| CVE-2016-6419 | 7.5 | Oct 5 | SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors,… Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.1; 5.4.0 |
| CVE-2019-1696 | 7.4 | May 3 | Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 2.9.8; 2.9.9; 2.9.10; 2.9.11; 2.9.12; 2.9.13 |
| CVE-2024-20374 | 7.2 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; +34 more |
| CVE-2022-20925 | 7.2 | Nov 15 | A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands… Affected: 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; +9 more |
| CVE-2019-15992 | 7.2 | Sep 23 | A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.7; 6.5.0 before 6.5.0.2 |
| CVE-2019-12690 | 7.2 | Oct 2 | A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the… Affected: before 6.3.0.5; 6.4.0 before 6.4.0.4 |
| CVE-2018-15397 | 6.8 | Oct 5 | A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 6.2.2 |
| CVE-2020-3514 | 6.7 | Oct 21 | A vulnerability in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their Cisco… Affected: before 6.6.1 |
| CVE-2025-20301 | 6.5 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20482 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.3.1; +13 more |
| CVE-2024-20473 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +1 more |
| CVE-2024-20472 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +1 more |
| CVE-2024-20471 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20379 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2 |
| CVE-2024-20340 | 6.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +33 more |
| CVE-2023-20155 | 6.5 | Nov 1 | A vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause the device to become unresponsive or… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1; +1 more |
| CVE-2023-20114 | 6.5 | Nov 1 | A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1; +1 more |
| CVE-2022-20744 | 6.5 | May 3 | A vulnerability in the input protection mechanisms of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to view data without proper… Affected: before 7.1.0 |
| CVE-2019-12700 | 6.5 | Oct 2 | A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC)… Affected: through 6.1.0; 6.2.0 before 6.2.3.14; through 6.1.0; 6.2.0 before 6.2.3.14; 6.2.3 before 6.2.3.7 |
| CVE-2018-0278 | 6.5 | May 2 | A vulnerability in the management console of Cisco Firepower System Software could allow an unauthenticated, remote attacker to access sensitive data about the system Affected: 6.1.0; 6.2.0; 6.2.1; 6.2.2; 6.2.3 |
| CVE-2017-6673 | 6.5 | Jun 13 | A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information Affected: 6.1.0.2; 6.2.0 |
| CVE-2016-6435 | 6.5 | Oct 6 | The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376 Affected: 6.0.1 |
| CVE-2016-1413 | 6.5 | May 28 | The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka… Affected: 5.4.0; 5.4.0.2; 5.4.1; 5.4.1.1; 5.4.1.2; 5.4.1.3; +4 more |
| CVE-2025-20235 | 6.1 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20415 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20410 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20409 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20386 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20372 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20275 | 6.1 | Oct 23 | A vulnerability in the cluster backup feature of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +16 more |
| CVE-2024-20273 | 6.1 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20206 | 6.1 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.6.0 through 6.6.7.1; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.4; 7.3.0 through 7.3.1.1 |
| CVE-2023-20074 | 6.1 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1; +1 more |
| CVE-2023-20041 | 6.1 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.4.0.16; 6.6.7.1; 7.0.5; 7.1.0.3; 7.2.0; 7.2.0.1; +4 more |
| CVE-2023-20005 | 6.1 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1 |
| CVE-2022-20740 | 6.1 | May 3 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: before 6.6.5.2; 6.7.0 before 7.0.2; 7.1.0 before 7.1.0.1 |
| CVE-2020-3558 | 6.1 | Oct 21 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a… Affected: 6.2.0 through 6.2.3.16; 6.3.0 through 6.3.0.5; 6.4.0 through 6.4.0.9; 6.5.0 through 6.5.0.4 |
| CVE-2020-3553 | 6.1 | Oct 21 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: before 6.6.1 |
| CVE-2020-3515 | 6.1 | Oct 21 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: before 6.6.1 |
| CVE-2020-3313 | 6.1 | May 6 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: before 6.2.2.3 |
| CVE-2020-3311 | 6.1 | May 6 | A vulnerability in the web interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page Affected: before 6.3.0 |