Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

187 records in Secure Firewall Management Center · all components

Priority CRITICAL 100KEV

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected d…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.44431 Published 2026-03-04 No fix listed CWE-502
Priority CRITICAL 100KEV

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to ob…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.88658 Published 2026-03-04 No fix listed CWE-288
Priority HIGH 81KEV

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sens…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.35096 Published 2026-07-29 No fix listed CWE-259
Priority HIGH 65

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.15894 Published 2025-08-14 No fix listed CWE-74
Priority MEDIUM 62

A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.20854 Published 2023-11-01 No fix listed CWE-269
Priority MEDIUM 55

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0335 Published 2020-09-23 No fix listed CWE-287
Priority MEDIUM 49

A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the transfer of files to an affected system v…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.02987 Published 2018-07-16 No fix listed CWE-693
Priority MEDIUM 48

A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the detection engine t…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0235 Published 2018-04-19 No fix listed CWE-400
Priority MEDIUM 47

A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine could allow an unauthenticated, remote att…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01684 Published 2021-08-18 No fix listed CWE-200
Priority MEDIUM 47

A vulnerability in the licensing service of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.The vulnerability is due to improp…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01956 Published 2020-10-21 No fix listed CWE-399
Priority MEDIUM 46

Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to i…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01391 Published 2021-10-27 No fix listed CWE-241
Priority MEDIUM 46

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03123 Published 2019-10-02 No fix listed CWE-20
Priority MEDIUM 46

A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03302 Published 2019-10-02 No fix listed CWE-119
Priority MEDIUM 46

A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03302 Published 2019-10-02 No fix listed CWE-119
Priority MEDIUM 45

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arb…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00935 Published 2024-10-23 No fix listed CWE-78
Priority MEDIUM 45

A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to bypass security protections and upload malicious files to the affected…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03959 Published 2022-05-03 No fix listed CWE-434
Priority MEDIUM 45

Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00959 Published 2020-05-06 No fix listed CWE-798
Priority MEDIUM 45

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02965 Published 2019-10-02 No fix listed CWE-89
Priority MEDIUM 45

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02965 Published 2019-10-02 No fix listed CWE-89
Priority MEDIUM 45

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02965 Published 2019-10-02 No fix listed CWE-89
Priority MEDIUM 45

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02965 Published 2019-10-02 No fix listed CWE-89
Priority MEDIUM 45

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02965 Published 2019-10-02 No fix listed CWE-89
Priority MEDIUM 45

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02965 Published 2019-10-02 No fix listed CWE-89
Load more
Open these records in search →