Priority CRITICAL 100KEV
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected d…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.44431 · Published 2026-03-04 · No fix listed CWE-502
Priority CRITICAL 100KEV
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to ob…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.88658 · Published 2026-03-04 · No fix listed CWE-288
Priority HIGH 81KEV
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sens…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.35096 · Published 2026-07-29 · No fix listed CWE-259
Priority HIGH 78
The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.80696 · Published 2016-10-06 · No fix listed CWE-20
Priority HIGH 65
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.15894 · Published 2025-08-14 · No fix listed CWE-74
Priority MEDIUM 62
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat…
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.20854 · Published 2023-11-01 · No fix listed CWE-269
Priority MEDIUM 55
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0335 · Published 2020-09-23 · No fix listed CWE-287
Priority MEDIUM 55
The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.36617 · Published 2016-10-06 · No fix listed CWE-200
Priority MEDIUM 49
A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the transfer of files to an affected system v…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.02987 · Published 2018-07-16 · No fix listed CWE-693
Priority MEDIUM 48
A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the detection engine t…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.0235 · Published 2018-04-19 · No fix listed CWE-400
Priority MEDIUM 47
A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine could allow an unauthenticated, remote att…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01684 · Published 2021-08-18 · No fix listed CWE-200
Priority MEDIUM 47
A vulnerability in the licensing service of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.The vulnerability is due to improp…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01956 · Published 2020-10-21 · No fix listed CWE-399
Priority MEDIUM 46
Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to i…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01391 · Published 2021-10-27 · No fix listed CWE-241
Priority MEDIUM 46
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an a…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03123 · Published 2019-10-02 · No fix listed CWE-20
Priority MEDIUM 46
A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03302 · Published 2019-10-02 · No fix listed CWE-119
Priority MEDIUM 46
A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03302 · Published 2019-10-02 · No fix listed CWE-119
Priority MEDIUM 45
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arb…
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00935 · Published 2024-10-23 · No fix listed CWE-78
Priority MEDIUM 45
A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to bypass security protections and upload malicious files to the affected…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03959 · Published 2022-05-03 · No fix listed CWE-434
Priority MEDIUM 45
Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00959 · Published 2020-05-06 · No fix listed CWE-798
Priority MEDIUM 45
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02965 · Published 2019-10-02 · No fix listed CWE-89
Priority MEDIUM 45
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02965 · Published 2019-10-02 · No fix listed CWE-89
Priority MEDIUM 45
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02965 · Published 2019-10-02 · No fix listed CWE-89
Priority MEDIUM 45
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02965 · Published 2019-10-02 · No fix listed CWE-89
Priority MEDIUM 45
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02965 · Published 2019-10-02 · No fix listed CWE-89
Priority MEDIUM 45
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02965 · Published 2019-10-02 · No fix listed CWE-89
Load more