Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

187 records

Priority HIGH 81KEV

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sens…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.35096 Published 2026-07-29 No fix listed CWE-259
Priority LOW 22

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00327 Published 2026-03-04 No fix listed CWE-89
Priority LOW 37

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00396 Published 2026-03-04 No fix listed CWE-89
Priority CRITICAL 100KEV

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected d…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.44431 Published 2026-03-04 No fix listed CWE-502
Priority LOW 28

A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00156 Published 2026-03-04 No fix listed CWE-269
Priority CRITICAL 100KEV

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to ob…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.88658 Published 2026-03-04 No fix listed CWE-288
Priority LOW 25

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary comma…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0042 Published 2025-08-14 No fix listed CWE-77
Priority HIGH 65

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.15894 Published 2025-08-14 No fix listed CWE-74
Priority LOW 27

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a use…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0032 Published 2025-08-14 No fix listed CWE-79
Priority LOW 23

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00491 Published 2025-08-14 No fix listed CWE-643
Priority LOW 37

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated docum…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00472 Published 2025-08-14 No fix listed CWE-20
Priority LOW 20

A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access sensitive configuration information.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00278 Published 2024-11-15 No fix listed CWE-317
Priority LOW 31

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to elevate pri…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00492 Published 2024-10-23 No fix listed CWE-863
Priority LOW 31

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00442 Published 2024-10-23 No fix listed CWE-89
Priority LOW 31

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00442 Published 2024-10-23 No fix listed CWE-89
Priority LOW 31

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00442 Published 2024-10-23 No fix listed CWE-89
Priority MEDIUM 45

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arb…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00935 Published 2024-10-23 No fix listed CWE-78
Priority LOW 27

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00322 Published 2024-10-23 No fix listed CWE-79
Priority LOW 27

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00322 Published 2024-10-23 No fix listed CWE-79
Priority LOW 27

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00322 Published 2024-10-23 No fix listed CWE-79
Priority LOW 24

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00305 Published 2024-10-23 No fix listed CWE-79
Load more