Priority HIGH 81KEV
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sens…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.35096 · Published 2026-07-29 · No fix listed CWE-259
Priority LOW 22
A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00327 · Published 2026-03-04 · No fix listed CWE-89
Priority LOW 37
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00396 · Published 2026-03-04 · No fix listed CWE-89
Priority CRITICAL 100KEV
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected d…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.44431 · Published 2026-03-04 · No fix listed CWE-502
Priority LOW 28
A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00156 · Published 2026-03-04 · No fix listed CWE-269
Priority CRITICAL 100KEV
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to ob…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.88658 · Published 2026-03-04 · No fix listed CWE-288
Priority LOW 25
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary comma…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0042 · Published 2025-08-14 · No fix listed CWE-77
Priority LOW 20
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00338 · Published 2025-08-14 · No fix listed CWE-862
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a different domain.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.004 · Published 2025-08-14 · No fix listed CWE-862
Priority HIGH 65
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.15894 · Published 2025-08-14 · No fix listed CWE-74
Priority LOW 27
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a use…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0032 · Published 2025-08-14 · No fix listed CWE-79
Priority LOW 23
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00491 · Published 2025-08-14 · No fix listed CWE-643
Priority LOW 37
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated docum…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00472 · Published 2025-08-14 · No fix listed CWE-20
Priority LOW 20
A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access sensitive configuration information.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00278 · Published 2024-11-15 · No fix listed CWE-317
Priority LOW 20
A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access sensitive configuration information.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00278 · Published 2024-11-15 · No fix listed CWE-317
Priority LOW 31
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to elevate pri…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00492 · Published 2024-10-23 · No fix listed CWE-863
Priority LOW 31
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00442 · Published 2024-10-23 · No fix listed CWE-89
Priority LOW 31
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00442 · Published 2024-10-23 · No fix listed CWE-89
Priority LOW 31
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00442 · Published 2024-10-23 · No fix listed CWE-89
Priority MEDIUM 45
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arb…
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00935 · Published 2024-10-23 · No fix listed CWE-78
Priority LOW 27
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00322 · Published 2024-10-23 · No fix listed CWE-79
Priority LOW 27
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00322 · Published 2024-10-23 · No fix listed CWE-79
Priority LOW 27
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00322 · Published 2024-10-23 · No fix listed CWE-79
Priority LOW 24
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00305 · Published 2024-10-23 · No fix listed CWE-79
Priority LOW 31
A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0052 · Published 2024-10-23 · No fix listed CWE-202
Load more