Priority MEDIUM 46
A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) cond…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01402 · Published 2021-10-27 · No fix listed CWE-119
Priority LOW 28
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00616 · Published 2021-10-27 · No fix listed CWE-601
Priority LOW 23
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0048 · Published 2021-10-27 · No fix listed CWE-601
Priority MEDIUM 41
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01987 · Published 2021-10-27 · No fix listed CWE-26
Priority LOW 26
A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite or append arbitrary data to system files using root-level privileges.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00216 · Published 2021-10-27 · No fix listed CWE-73
Priority LOW 36
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2021-10-27 · No fix listed CWE-20
Priority LOW 36
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2021-10-27 · No fix listed CWE-20
Priority MEDIUM 42
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actio…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00903 · Published 2018-06-21 · No fix listed CWE-352