Known vulnerabilities in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - page 5

Software CPE: cpe:2.3:a:cisco_systems:cisco_firepower_management_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 148
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) is affected by 148 known vulnerabilities: 2 critical, 16 high, 34 medium, 96 low Critical High Medium Low

Vulnerabilities (148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62675 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20629
CWE-79 Low
No
No
6.4.0.15, 6.6.5.2, 7.0.2 28.04.2022 SB2022042807
#VU62674 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20628
CWE-79 Low
No
No
6.4.0.15, 6.6.5.2, 7.0.2 28.04.2022 SB2022042807
#VU62673 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20627
CWE-79 Low
No
No
6.4.0.15, 6.6.5.2, 7.0.2 28.04.2022 SB2022042807
#VU57794 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-34762
CWE-22 High
No
No
6.4.0.13, 6.6.5, 6.7.0.3, 7.0.1 29.10.2021 SB2021102912
#VU57793 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34751
CWE-200 Low
No
No
6.4.0.13, 6.6.5.1, 6.7.0.3, 7.0.1 29.10.2021 SB2021102911
#VU57792 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34750
CWE-200 Low
No
No
6.4.0.13, 6.6.5.1, 6.7.0.3, 7.0.1 29.10.2021 SB2021102911
#VU57791 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-34764
CWE-79 Low
No
No
6.4.0.13, 6.6.5, 6.7.0.3 29.10.2021 SB2021102913
#VU57790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-34763
CWE-79 Low
No
No
6.4.0.13, 6.6.5, 6.7.0.3 29.10.2021 SB2021102913
#VU52733 - Improper Access Control
CVE-2021-1477
CWE-284 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU52732 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1458
CWE-79 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU52731 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1457
CWE-79 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU52730 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1456
CWE-79 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU52729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1455
CWE-79 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU49584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1239
CWE-79 Low
No
No
6.7.0 18.01.2021 SB2021011818
#VU49582 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-1267
CWE-776 Low
No
No
6.6.1 13.01.2021 SB2021011817
#VU49583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1238
CWE-79 Low
No
No
6.7.0 13.01.2021 SB2021011818
#VU49585 - Unprotected Storage of Credentials
CVE-2021-1126
CWE-256 Low
No
No
6.7.0 13.01.2021 SB2021011818
#VU47525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3320
CWE-79 Low
No
No
- 08.10.2020 SB2020101305
#VU27684 - Improper input validation
CVE-2020-3307
CWE-20 Medium
No
No
6.3.0.2 11.05.2020 SB2020051140
#VU27683 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-3311
CWE-601 Low
No
No
6.3.0 11.05.2020 SB2020051139


Showing elements 81 - 100 out of 148