Known vulnerabilities in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) 6.3.0

Version: 6.3.0
Software CPE: cpe:2.3:a:cisco_systems:cisco_firepower_management_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) version 6.3.0 Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) 6.3.0 is affected by 23 vulnerabilities: 3 high, 4 medium, 16 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99319 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20274
CWE-79 Low
No
No
7.0.6.2, 7.2.6, 7.4.2 24.10.2024 SB2024102421
#VU82683 - Improper input validation
CVE-2023-20155
CWE-20 Medium
No
No
6.4.0.17, 7.0.6, 7.2.4 02.11.2023 SB2023110240
#VU82673 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20048
CWE-78 Medium
Public exploit available
No
6.4.0.17, 7.0.6, 7.2.4 02.11.2023 SB2023110217
#VU82672 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20220
CWE-78 Low
No
No
6.4.0.17, 7.0.6, 7.2.5 02.11.2023 SB2023110216
#VU69242 - Resource exhaustion
CVE-2022-20854
CWE-400 Medium
No
No
6.6.7, 7.1.0 11.11.2022 SB2022111115
#VU69218 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20843
CWE-79 Low
No
No
6.4.0.15, 6.6.7, 7.2.0 10.11.2022 SB2022111033
#VU69212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20834
CWE-79 Low
No
No
6.6.7, 7.2.0 10.11.2022 SB2022111033
#VU62680 - Reliance on Untrusted Inputs in a Security Decision
CVE-2022-20744
CWE-807 Low
No
No
7.1 28.04.2022 SB2022042808
#VU62679 - Unrestricted Upload of File with Dangerous Type
CVE-2022-20743
CWE-434 Medium
No
No
6.4.0.15, 6.6.5.2, 7.0.2, 7.1.0.1 28.04.2022 SB2022042809
#VU62677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20740
CWE-79 Low
No
No
6.6.5.2, 7.0.2, 7.1.0.1 28.04.2022 SB2022042810
#VU62675 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20629
CWE-79 Low
No
No
6.4.0.15, 6.6.5.2, 7.0.2 28.04.2022 SB2022042807
#VU62674 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20628
CWE-79 Low
No
No
6.4.0.15, 6.6.5.2, 7.0.2 28.04.2022 SB2022042807
#VU62673 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20627
CWE-79 Low
No
No
6.4.0.15, 6.6.5.2, 7.0.2 28.04.2022 SB2022042807
#VU57794 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-34762
CWE-22 High
No
No
6.4.0.13, 6.6.5, 6.7.0.3, 7.0.1 29.10.2021 SB2021102912
#VU57793 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34751
CWE-200 Low
No
No
6.4.0.13, 6.6.5.1, 6.7.0.3, 7.0.1 29.10.2021 SB2021102911
#VU57792 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34750
CWE-200 Low
No
No
6.4.0.13, 6.6.5.1, 6.7.0.3, 7.0.1 29.10.2021 SB2021102911
#VU57791 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-34764
CWE-79 Low
No
No
6.4.0.13, 6.6.5, 6.7.0.3 29.10.2021 SB2021102913
#VU57790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-34763
CWE-79 Low
No
No
6.4.0.13, 6.6.5, 6.7.0.3 29.10.2021 SB2021102913
#VU24526 - Improper Authentication
CVE-2019-16028
CWE-287 High
No
No
6.4.0.7, 6.5.2.0 24.01.2020 SB2020012416
#VU21621 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12686
CWE-89 High
No
No
6.2.3.11, 6.4.0 08.10.2019 SB2019100805


Showing elements 1 - 20 out of 23