SF
Product
Secure Firewall Management Center
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 57Medium 122Low 0
Watch
Add Secure Firewall Management Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0384 | 5.8 | Jul 16 | A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is… Affected: 6.0.0; 6.1.0; 6.2.0; 6.2.1; 6.2.2 |
| CVE-2018-0333 | 5.8 | Jun 7 | A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass VPN security due to unintended… Affected: 6.2.2 |
| CVE-2018-0283 | 5.8 | May 2 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on… Affected: 6.1.0; 6.2.0; 6.2.2; 6.2.3 |
| CVE-2018-0281 | 5.8 | May 2 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on… Affected: 6.1.0; 6.2.0; 6.2.1; 6.2.2; 6.2.3 |
| CVE-2017-12300 | 5.8 | Nov 16 | A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to… Affected: 2.9.9; 2.9.10; 2.9.11; 2.9.12 |
| CVE-2017-3814 | 5.8 | Feb 3 | A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka… Affected: 5.3.0; 5.4.0; 6.0.0; 6.0.1; 6.1.0 |
| CVE-2017-3809 | 5.8 | Feb 3 | A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to prevent deployment of a complete… Affected: 6.1.0; 6.2.0 |
| CVE-2024-20274 | 5.5 | Oct 23 | Cisco Secure Firewall Management Center HTML Injection Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2021-1126 | 5.5 | Jan 13 | A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view credentials for a… Affected: before 6.7.0 |
| CVE-2024-20403 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20387 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks Affected: 6.2.3.17; 6.2.3.18; 6.4.0.13; 6.4.0.14; 6.4.0.15; 6.4.0.16; +18 more |
| CVE-2024-20377 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +33 more |
| CVE-2024-20364 | 5.4 | Oct 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored… Affected: 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; +34 more |
| CVE-2024-20300 | 5.4 | Oct 23 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20298 | 5.4 | Oct 23 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +1 more |
| CVE-2024-20269 | 5.4 | Oct 23 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20264 | 5.4 | Oct 23 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +9 more |
| CVE-2022-20627 | 5.4 | May 3 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2 |
| CVE-2022-20628 | 5.4 | May 3 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2 |
| CVE-2022-20629 | 5.4 | May 3 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2 |
| CVE-2020-3320 | 5.4 | Oct 8 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 6.6.1 |
| CVE-2017-12221 | 5.4 | Sep 7 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: All versions, or not specified |
| CVE-2017-6717 | 5.4 | Jul 4 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 5.4.0; 5.4.0.2; 5.4.1; 5.4.1.1; 5.4.1.2; 5.4.1.3; +16 more |
| CVE-2017-6716 | 5.4 | Jul 4 | A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack… Affected: 5.3.1.7; 5.4.0; 5.4.0.2; 5.4.1; 5.4.1.1; 5.4.1.2; +5 more |
| CVE-2017-6715 | 5.4 | Jul 4 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 5.4.0; 5.4.0.2; 5.4.1; 5.4.1.1; 5.4.1.2; 5.4.1.3; +3 more |
| CVE-2017-3847 | 5.4 | Feb 22 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 6.2.1 |
| CVE-2024-20388 | 5.3 | Oct 23 | A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2022-20941 | 5.3 | Nov 10 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to access sensitive… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2021-1236 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured… Affected: 2.9.14.0; 2.9.14.14; 2.9.15; 2.9.16; 2.9.17 |
| CVE-2021-1224 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated,… Affected: 2.9.14.0; 2.9.15; 2.9.16; 2.9.17; 2.9.18; 3.0.1 |
| CVE-2020-3557 | 5.3 | Oct 21 | A vulnerability in the host input API daemon of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: before 6.6.1 |
| CVE-2020-3315 | 5.3 | May 6 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured file policies… Affected: 2.9.14.4; 2.9.15; 2.9.16 |
| CVE-2020-3307 | 5.3 | May 6 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an… Affected: 6.2.2; 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2019-1982 | 5.3 | Nov 5 | A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management… Affected: 2.9.13; 2.9.14.0; 3.0.0 |
| CVE-2019-1980 | 5.3 | Nov 5 | A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: 2.9.12 through 2.9.12.15; 2.9.13 through 2.9.13.6; 2.9.14.0 through 2.9.14.5; 2.9.15; 2.9.16 |
| CVE-2016-1342 | 5.3 | Feb 26 | The device login page in Cisco FirePOWER Management Center 5.3 through 6.0.0.1 allows remote attackers to obtain potentially sensitive software-version information by reading help… Affected: 5.3.0.3; 5.3.1.3; 5.3.1.4; 5.3.1.5; 5.3.1.6; 5.3_base; +11 more |
| CVE-2026-20003 | 4.9 | Mar 4 | A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system Affected: 7.0.0 through 7.0.8.1; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.10.2; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.3; 7.6.0 through 7.6.3; +1 more |
| CVE-2025-20306 | 4.9 | Aug 14 | Cisco Secure Firewall Management Center Software Command Injection Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20218 | 4.9 | Aug 14 | Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2020-3308 | 4.9 | May 6 | A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level… Affected: 6.2.2; 6.2.3 |
| CVE-2019-12691 | 4.9 | Oct 2 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory… Affected: before 6.2.3 |
| CVE-2022-20936 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20935 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20932 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20905 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20872 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20843 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20840 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20839 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20838 | 4.8 | Nov 10 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |