SF
Product
Secure Firewall Management Center
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 57Medium 122Low 0
Watch
Add Secure Firewall Management Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20003 | 4.9 | Mar 4 | A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system Affected: 7.0.0 through 7.0.8.1; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.10.2; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.3; 7.6.0 through 7.6.3; +1 more |
| CVE-2025-20306 | 4.9 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker with… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20218 | 4.9 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitive… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2020-3308 | 4.9 | May 6 | A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level… Affected: 6.2.2; 6.2.3 |
| CVE-2019-12691 | 4.9 | Oct 2 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory… Affected: before 6.2.3 |
| CVE-2022-20936 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20935 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20932 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20905 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20872 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20843 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20840 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20839 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20838 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20836 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20835 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20834 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20833 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20832 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20831 | 4.8 | Nov 15 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2021-1458 | 4.8 | Apr 29 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: through 6.4.0.11; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1457 | 4.8 | Apr 29 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: through 6.4.0.11; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1456 | 4.8 | Apr 29 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: through 6.4.0.11; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1455 | 4.8 | Apr 29 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a… Affected: through 6.4.0.11; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1239 | 4.8 | Jan 13 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored… Affected: before 6.7.0 |
| CVE-2021-1238 | 4.8 | Jan 13 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored… Affected: before 6.7.0 |
| CVE-2019-15280 | 4.8 | Oct 16 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored… Affected: 6.2.0; 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1949 | 4.8 | Aug 8 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 6.1.0; 6.2.1; 6.2.2; 6.2.3; 6.3.0; 6.4.0 |
| CVE-2019-1802 | 4.8 | Apr 18 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting… Affected: 6.2.3; 6.3.0; 6.4.0 |
| CVE-2020-3301 | 4.4 | May 6 | Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an… Affected: 2.0.3; 2.1.0; 2.1.1; 2.2.0; 2.3.0; 5.0.0; +7 more |
| CVE-2025-20302 | 4.3 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2021-34751 | 4.3 | Nov 15 | A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to… Affected: before 6.4.0.13; 6.5.0 before 6.6.5.1; 6.7.0 before 6.7.0.3; 7.0.0 |
| CVE-2021-34750 | 4.3 | Nov 15 | A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access… Affected: All versions, or not specified |
| CVE-2022-20938 | 4.3 | Nov 15 | A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2021-1477 | 4.3 | Apr 29 | A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the… Affected: before 6.4.0.12; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-1267 | 4.3 | Jan 13 | A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: before 6.6.1 |
| CVE-2015-6411 | – | Dec 15 | Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive… Affected: 5.4.1.3; 6.0.0; 6.0.1 |