SF
Product
Secure Firewall Management Center
by Cisco · last CVE Jul 29, 2026
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 57Medium 122Low 0
Watch

Add Secure Firewall Management Center to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-6439
7.5
2%
Oct 27
A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a…
Affected: 5.3.0; 5.3.0.2; 5.3.0.3; 5.3.0.4; 5.3.1; 5.3.1.3; +18 more
CVE-2016-6419
7.5
1%
Oct 5
SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors,…
Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.1; 5.4.0
CVE-2019-1696
7.4
2%
May 3
Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,…
Affected: 2.9.8; 2.9.9; 2.9.10; 2.9.11; 2.9.12; 2.9.13
CVE-2024-20374
7.2
1%
Oct 23
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an…
Affected: 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; +34 more
CVE-2022-20925
7.2
1%
Nov 15
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands…
Affected: 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; +9 more
CVE-2019-15992
7.2
4%
Sep 23
A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
Affected: before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.7; 6.5.0 before 6.5.0.2
CVE-2019-12690
7.2
4%
Oct 2
A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the…
Affected: before 6.3.0.5; 6.4.0 before 6.4.0.4
Page 2 of 2 · 57 total