SF
Product
Secure Firewall Management Center
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 57Medium 122Low 0
Watch
Add Secure Firewall Management Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1931 | 6.1 | Jul 6 | Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to… Affected: 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1930 | 6.1 | Jul 6 | Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to… Affected: 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1671 | 6.1 | Feb 7 | Cisco Firepower Management Center Cross-Site Scripting Vulnerability Affected: 6.0.0; 6.1.0; 6.2.0; 6.2.3; 6.2.3.6; 6.3.0; +1 more |
| CVE-2019-1642 | 6.1 | Jan 23 | Cisco Firepower Management Center Cross-Site Scripting Vulnerability Affected: 6.2.3; 6.3.0 |
| CVE-2017-12220 | 6.1 | Sep 7 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: All versions, or not specified |
| CVE-2016-6365 | 6.1 | Aug 23 | Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web… Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.0.2; 5.3.1; 5.4.0 |
| CVE-2016-1431 | 6.1 | Jun 18 | Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML… Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.1; 5.4.0 |
| CVE-2026-20044 | 6.0 | Mar 4 | Cisco Secure Firewall Management Center Command Injection Vulnerability Affected: 6.4.0 through 6.4.0.18; 7.0.0 through 7.0.8.1; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.10.2; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.3; +2 more |
| CVE-2017-3885 | 5.9 | Apr 7 | A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to… Affected: 6.0.0; 6.1.0; 6.2.0; 6.2.1 |
| CVE-2024-20361 | 5.8 | May 22 | A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +6 more |
| CVE-2019-1981 | 5.8 | Nov 5 | A vulnerability in the normalization functionality of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: 2.9.12 through 2.9.12.15; 2.9.13 through 2.9.13.6; 2.9.14.0 through 2.9.14.5; 2.9.15; 2.9.16 |
| CVE-2019-1978 | 5.8 | Nov 5 | A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: 2.9.12 through 2.9.12.15; 2.9.13 through 2.9.13.6; 2.9.14.0 through 2.9.14.5; 2.9.15; 2.9.16 |
| CVE-2019-12701 | 5.8 | Oct 2 | A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass the file… Affected: All versions, or not specified |
| CVE-2019-1833 | 5.8 | May 16 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol parser of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.1.0; 6.2.0; 6.2.1; 6.2.2; 6.2.3 |
| CVE-2018-0384 | 5.8 | Jul 16 | A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is… Affected: 6.0.0; 6.1.0; 6.2.0; 6.2.1; 6.2.2 |
| CVE-2018-0333 | 5.8 | Jun 7 | A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass VPN security due to unintended… Affected: 6.2.2 |
| CVE-2018-0283 | 5.8 | May 2 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on… Affected: 6.1.0; 6.2.0; 6.2.2; 6.2.3 |
| CVE-2018-0281 | 5.8 | May 2 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on… Affected: 6.1.0; 6.2.0; 6.2.1; 6.2.2; 6.2.3 |
| CVE-2017-12300 | 5.8 | Nov 16 | A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to… Affected: 2.9.9; 2.9.10; 2.9.11; 2.9.12 |
| CVE-2017-3814 | 5.8 | Feb 3 | A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka… Affected: 5.3.0; 5.4.0; 6.0.0; 6.0.1; 6.1.0 |
| CVE-2017-3809 | 5.8 | Feb 3 | A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to prevent deployment of a complete… Affected: 6.1.0; 6.2.0 |
| CVE-2024-20274 | 5.5 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2021-1126 | 5.5 | Jan 13 | A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view credentials for a… Affected: before 6.7.0 |
| CVE-2024-20403 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20387 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks Affected: 6.2.3.17; 6.2.3.18; 6.4.0.13; 6.4.0.14; 6.4.0.15; 6.4.0.16; +18 more |
| CVE-2024-20377 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +33 more |
| CVE-2024-20364 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored… Affected: 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; +34 more |
| CVE-2024-20300 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20298 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +1 more |
| CVE-2024-20269 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20264 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +9 more |
| CVE-2022-20629 | 5.4 | May 3 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2 |
| CVE-2022-20628 | 5.4 | May 3 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2 |
| CVE-2022-20627 | 5.4 | May 3 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2 |
| CVE-2020-3320 | 5.4 | Oct 8 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 6.6.1 |
| CVE-2017-12221 | 5.4 | Sep 7 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: All versions, or not specified |
| CVE-2017-6717 | 5.4 | Jul 4 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 5.4.0; 5.4.0.2; 5.4.1; 5.4.1.1; 5.4.1.2; 5.4.1.3; +16 more |
| CVE-2017-6716 | 5.4 | Jul 4 | A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack… Affected: 5.3.1.7; 5.4.0; 5.4.0.2; 5.4.1; 5.4.1.1; 5.4.1.2; +5 more |
| CVE-2017-6715 | 5.4 | Jul 4 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 5.4.0; 5.4.0.2; 5.4.1; 5.4.1.1; 5.4.1.2; 5.4.1.3; +3 more |
| CVE-2017-3847 | 5.4 | Feb 22 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 6.2.1 |
| CVE-2024-20388 | 5.3 | Oct 23 | A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2022-20941 | 5.3 | Nov 15 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to access sensitive… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2021-1236 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured… Affected: 2.9.14.0; 2.9.14.14; 2.9.15; 2.9.16; 2.9.17 |
| CVE-2021-1224 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated,… Affected: 2.9.14.0; 2.9.15; 2.9.16; 2.9.17; 2.9.18; 3.0.1 |
| CVE-2020-3557 | 5.3 | Oct 21 | A vulnerability in the host input API daemon of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: before 6.6.1 |
| CVE-2020-3315 | 5.3 | May 6 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured file policies… Affected: 2.9.14.4; 2.9.15; 2.9.16 |
| CVE-2020-3307 | 5.3 | May 6 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an… Affected: 6.2.2; 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1982 | 5.3 | Nov 5 | A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management… Affected: 2.9.13; 2.9.14.0; 3.0.0 |
| CVE-2019-1980 | 5.3 | Nov 5 | A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: 2.9.12 through 2.9.12.15; 2.9.13 through 2.9.13.6; 2.9.14.0 through 2.9.14.5; 2.9.15; 2.9.16 |
| CVE-2016-1342 | 5.3 | Feb 26 | The device login page in Cisco FirePOWER Management Center 5.3 through 6.0.0.1 allows remote attackers to obtain potentially sensitive software-version information by reading help… Affected: 5.3.0.3; 5.3.1.3; 5.3.1.4; 5.3.1.5; 5.3.1.6; 5.3_base; +11 more |