Known vulnerabilities in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - page 4

Software CPE: cpe:2.3:a:cisco_systems:cisco_firepower_management_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 148
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) is affected by 148 known vulnerabilities: 2 critical, 16 high, 34 medium, 96 low Critical High Medium Low

Vulnerabilities (148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69239 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20926
CWE-78 Medium
No
No
7.2.0 11.11.2022 SB2022111109
#VU69238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20925
CWE-78 Medium
No
No
7.2.0 11.11.2022 SB2022111109
#VU69223 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20936
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69222 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20935
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69221 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20932
CWE-79 Low
No
No
6.4.0.15, 6.6.7, 7.2.0 10.11.2022 SB2022111033
#VU69220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20905
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20872
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69218 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20843
CWE-79 Low
No
No
6.4.0.15, 6.6.7, 7.2.0 10.11.2022 SB2022111033
#VU69217 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20840
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20839
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20838
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20836
CWE-79 Low
No
No
- 10.11.2022 SB2022111032
#VU69213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20835
CWE-79 Low
No
No
7.2.0 10.11.2022 SB2022111033
#VU69212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20834
CWE-79 Low
No
No
6.6.7, 7.2.0 10.11.2022 SB2022111033
#VU69211 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20833
CWE-79 Low
No
No
7.2.0 10.11.2022 SB2022111033
#VU69210 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20832
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20831
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU62680 - Reliance on Untrusted Inputs in a Security Decision
CVE-2022-20744
CWE-807 Low
No
No
7.1 28.04.2022 SB2022042808
#VU62679 - Unrestricted Upload of File with Dangerous Type
CVE-2022-20743
CWE-434 Medium
No
No
6.4.0.15, 6.6.5.2, 7.0.2, 7.1.0.1 28.04.2022 SB2022042809
#VU62677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20740
CWE-79 Low
No
No
6.6.5.2, 7.0.2, 7.1.0.1 28.04.2022 SB2022042810


Showing elements 61 - 80 out of 148