SF
Product
Secure Firewall Management Center
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 57Medium 122Low 0
Watch
Add Secure Firewall Management Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20836 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20835 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20834 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20833 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20832 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20831 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2021-1458 | 4.8 | Apr 29 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: through 6.4.0.11; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1457 | 4.8 | Apr 29 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: through 6.4.0.11; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1456 | 4.8 | Apr 29 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: through 6.4.0.11; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1455 | 4.8 | Apr 29 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: through 6.4.0.11; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1239 | 4.8 | Jan 13 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored… Affected: before 6.7.0 |
| CVE-2021-1238 | 4.8 | Jan 13 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored… Affected: before 6.7.0 |
| CVE-2019-15280 | 4.8 | Oct 16 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored… Affected: 6.2.0; 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1949 | 4.8 | Aug 8 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 6.1.0; 6.2.1; 6.2.2; 6.2.3; 6.3.0; 6.4.0 |
| CVE-2019-1802 | 4.8 | Apr 18 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting… Affected: 6.2.3; 6.3.0; 6.4.0 |
| CVE-2020-3301 | 4.4 | May 6 | Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an… Affected: 2.0.3; 2.1.0; 2.1.1; 2.2.0; 2.3.0; 5.0.0; +7 more |
| CVE-2025-20302 | 4.3 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2021-34751 | 4.3 | Nov 15 | A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to… Affected: before 6.4.0.13; 6.5.0 before 6.6.5.1; 6.7.0 before 6.7.0.3; 7.0.0 |
| CVE-2021-34750 | 4.3 | Nov 15 | A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access… Affected: All versions, or not specified |
| CVE-2022-20938 | 4.3 | Nov 15 | A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2021-1477 | 4.3 | Apr 29 | A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the… Affected: before 6.4.0.12; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1267 | 4.3 | Jan 13 | A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: before 6.6.1 |