cisco-sa-fmc-xss-6VqH4rpZ

csafUScisco_csaf

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

view advisory published 2020-10-21

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. Cisco has released software updates to address these vulnerabilities. There are no workarounds that address these vulnerabilities.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2020-3553USmedium6.1—
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cros…
CVE-2020-3515USmedium6.1—
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cros…
02

references

External citations — patches, advisories, analysis.

03

remediations (28)

  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.11 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.12 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.12 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.13 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.13 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.14 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.2.3.9 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.4.0.9 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.6.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.6.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Secure Firewall Management Center (FMC) 6.6.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan