Known vulnerabilities in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - page 6

Software CPE: cpe:2.3:a:cisco_systems:cisco_firepower_management_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 148
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) is affected by 148 known vulnerabilities: 2 critical, 16 high, 34 medium, 96 low Critical High Medium Low

Vulnerabilities (148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27682 - Improper input validation
CVE-2020-3302
CWE-20 Medium
No
No
6.2.2.2 11.05.2020 SB2020051138
#VU27681 - Use of Hard-coded Credentials
CVE-2020-3318
CWE-798 High
No
No
6.5.0 11.05.2020 SB2020051136
#VU27679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3313
CWE-79 Low
No
No
6.2.2.3, 6.2.3 11.05.2020 SB2020051135
#VU24526 - Improper Authentication
CVE-2019-16028
CWE-287 High
No
No
6.4.0.7, 6.5.2.0 24.01.2020 SB2020012416
#VU21629 - Resource exhaustion
CVE-2019-12700
CWE-400 Medium
No
No
6.2.2.5, 6.2.3.7 08.10.2019 SB2019100810
#VU21628 - Improper input validation
CVE-2019-12701
CWE-20 Medium
No
No
- 08.10.2019 SB2019100809
#VU21627 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-12691
CWE-22 Low
No
No
6.2.3 08.10.2019 SB2019100805
#VU21626 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-12690
CWE-78 Medium
No
No
6.1.0.7, 6.2.0.6, 6.2.2.3, 6.2.3 08.10.2019 SB2019100805
#VU21625 - Improper input validation
CVE-2019-12689
CWE-20 Medium
No
No
6.2.2.2, 6.2.3 08.10.2019 SB2019100805
#VU21623 - Memory corruption
CVE-2019-12688
CWE-119 High
No
No
6.2.3 08.10.2019 SB2019100805
#VU21622 - Memory corruption
CVE-2019-12687
CWE-119 High
No
No
6.2.2.3, 6.2.3 08.10.2019 SB2019100805
#VU21621 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12686
CWE-89 High
No
No
6.2.3.11, 6.4.0 08.10.2019 SB2019100805
#VU21620 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12685
CWE-89 High
No
No
6.3.0 08.10.2019 SB2019100805
#VU21619 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12683
CWE-89 High
No
No
6.1.0.7, 6.2.0.5, 6.2.2.2, 6.2.3 08.10.2019 SB2019100805
#VU21618 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12684
CWE-89 High
No
No
6.2.0.6, 6.2.2.3, 6.2.3 08.10.2019 SB2019100805
#VU21617 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12682
CWE-89 High
No
No
6.2.3 08.10.2019 SB2019100805
#VU21616 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12681
CWE-89 High
No
No
6.1.0.7, 6.2.0.6, 6.2.2.3, 6.2.3 08.10.2019 SB2019100805
#VU21615 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12680
CWE-89 High
No
No
6.2.2.3, 6.2.3 08.10.2019 SB2019100805
#VU21614 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12679
CWE-89 High
No
No
6.2.3 08.10.2019 SB2019100805
#VU17428 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1671
CWE-79 Low
No
No
- 07.02.2019 SB2019020709


Showing elements 101 - 120 out of 148