Known vulnerabilities in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - page 4

Software CPE: cpe:2.3:a:cisco_systems:cisco_firepower_management_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 160
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) is affected by 160 known vulnerabilities: 2 critical, 19 high, 42 medium, 97 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82683 - Improper input validation
CVE-2023-20155
CWE-20 Medium
No
No
6.4.0.17, 7.0.6, 7.2.4 02.11.2023 SB2023110240
#VU82674 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20063
CWE-78 Low
No
No
7.0.6, 7.2.4, 7.3.0 02.11.2023 SB2023110218
#VU82673 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20048
CWE-78 Medium
Available
No
6.4.0.17, 7.0.6, 7.2.4 02.11.2023 SB2023110217
#VU82672 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20220
CWE-78 Low
No
No
6.4.0.17, 7.0.6, 7.2.5 02.11.2023 SB2023110216
#VU82671 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20219
CWE-78 Low
No
No
7.0.6, 7.2.4.1, 7.2.5 02.11.2023 SB2023110216
#VU82668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20206
CWE-79 Low
No
No
- 02.11.2023 SB2023110204
#VU82667 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20074
CWE-79 Low
No
No
6.4.0.17, 7.0.6, 7.2.4.1 02.11.2023 SB2023110204
#VU82666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20041
CWE-79 Low
No
No
6.4.0.17, 7.0.6, 7.2.4, 7.3.0 02.11.2023 SB2023110204
#VU82665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20005
CWE-79 Low
No
No
7.0.6, 7.2.4, 7.3.0 02.11.2023 SB2023110204
#VU69242 - Resource exhaustion
CVE-2022-20854
CWE-400 Medium
No
No
6.6.7, 7.1.0 11.11.2022 SB2022111115
#VU69239 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20926
CWE-78 Medium
No
No
7.2.0 11.11.2022 SB2022111109
#VU69238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20925
CWE-78 Medium
No
No
7.2.0 11.11.2022 SB2022111109
#VU69237 -
CVE-2022-20941
Medium
No
No
7.2.0 11.11.2022 SB2022111109
#VU69236 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-20938
CWE-611 Low
No
No
6.6.7, 7.2.0 11.11.2022 SB2022111109
#VU69215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20838
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20835
CWE-79 Low
No
No
7.2.0 10.11.2022 SB2022111033
#VU69212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20834
CWE-79 Low
No
No
6.6.7, 7.2.0 10.11.2022 SB2022111033
#VU69211 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20833
CWE-79 Low
No
No
7.2.0 10.11.2022 SB2022111033
#VU69210 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20832
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033
#VU69208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20831
CWE-79 Low
No
No
7.2.1 10.11.2022 SB2022111033


Showing elements 61 - 80 out of 160