Known vulnerabilities in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - page 6

Software CPE: cpe:2.3:a:cisco_systems:cisco_firepower_management_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 160
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) is affected by 160 known vulnerabilities: 2 critical, 19 high, 42 medium, 97 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52733 - Improper Access Control
CVE-2021-1477
CWE-284 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU52732 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1458
CWE-79 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU52731 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1457
CWE-79 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU52730 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1456
CWE-79 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU52729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1455
CWE-79 Low
No
No
6.6.3, 6.7.0.2 29.04.2021 SB2021042902
#VU49584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1239
CWE-79 Low
No
No
6.7.0 18.01.2021 SB2021011818
#VU49582 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-1267
CWE-776 Low
No
No
6.6.1 13.01.2021 SB2021011817
#VU49583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1238
CWE-79 Low
No
No
6.7.0 13.01.2021 SB2021011818
#VU49585 - Unprotected Storage of Credentials
CVE-2021-1126
CWE-256 Low
No
No
6.7.0 13.01.2021 SB2021011818
#VU47525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3320
CWE-79 Low
No
No
- 08.10.2020 SB2020101305
#VU27684 - Improper input validation
CVE-2020-3307
CWE-20 Medium
No
No
6.3.0.2 11.05.2020 SB2020051140
#VU27683 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-3311
CWE-601 Low
No
No
6.3.0 11.05.2020 SB2020051139
#VU27682 - Improper input validation
CVE-2020-3302
CWE-20 Medium
No
No
6.2.2.2 11.05.2020 SB2020051138
#VU27681 - Use of Hard-coded Credentials
CVE-2020-3318
CWE-798 High
No
No
6.5.0 11.05.2020 SB2020051136
#VU27679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3313
CWE-79 Low
No
No
6.2.2.3, 6.2.3 11.05.2020 SB2020051135
#VU24526 - Improper Authentication
CVE-2019-16028
CWE-287 High
No
No
6.4.0.7, 6.5.2.0 24.01.2020 SB2020012416
#VU21629 - Resource exhaustion
CVE-2019-12700
CWE-400 Medium
No
No
6.2.2.5, 6.2.3.7 08.10.2019 SB2019100810
#VU21628 - Improper input validation
CVE-2019-12701
CWE-20 Medium
No
No
- 08.10.2019 SB2019100809
#VU21615 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12680
CWE-89 High
No
No
6.2.2.3, 6.2.3 08.10.2019 SB2019100805
#VU21614 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12679
CWE-89 High
No
No
6.2.3 08.10.2019 SB2019100805


Showing elements 101 - 120 out of 160