Vulnslist

find the latest Cisco vulnerabilities

Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities

cisco-sa-fmc-xss-dhJxQYZs · Medium · Published · Updated

Multiple vulnerabilities in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device.     These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-dhJxQYZs This advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2024-20264, CVE-2024-20269, CVE-2024-20273, CVE-2024-20298, CVE-2024-20300, CVE-2024-20364, CVE-2024-20372, CVE-2024-20386, CVE-2024-20403, CVE-2024-20409, CVE-2024-20410, CVE-2024-20415
Cisco Bug IDsCSCwf61443, CSCwh69787, CSCwh70866, CSCwi32423, CSCwi23477, CSCwj09456, CSCwi78593, CSCwi78594, CSCwj19632, CSCwi85823, CSCwj77284, CSCwj11119, CSCwi61058
CVSS ScoreBase 4.8
Base 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X
Base 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X
Base 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Secure Firewall Management Center (FMC) 6.2.3, Cisco Secure Firewall Management Center (FMC) 6.2.3.1, Cisco Secure Firewall Management Center (FMC) 6.2.3.2, Cisco Secure Firewall Management Center (FMC) 6.2.3.3, Cisco Secure Firewall Management Center (FMC) 6.2.3.4, Cisco Secure Firewall Management Center (FMC) 6.2.3.5, Cisco Secure Firewall Management Center (FMC) 6.2.3.6, Cisco Secure Firewall Management Center (FMC) 6.2.3.7, Cisco Secure Firewall Management Center (FMC) 6.2.3.9, Cisco Secure Firewall Management Center (FMC) 6.2.3.10, Cisco Secure Firewall Management Center (FMC) 6.2.3.11, Cisco Secure Firewall Management Center (FMC) 6.2.3.12, Cisco Secure Firewall Management Center (FMC) 6.2.3.13, Cisco Secure Firewall Management Center (FMC) 6.2.3.14, Cisco Secure Firewall Management Center (FMC) 6.2.3.15, Cisco Secure Firewall Management Center (FMC) 6.2.3.8, Cisco Secure Firewall Management Center (FMC) 6.2.3.16, Cisco Secure Firewall Management Center (FMC) 6.2.3.17, Cisco Secure Firewall Management Center (FMC) 6.2.3.18, Cisco Secure Firewall Management Center (FMC) 6.4.0, Cisco Secure Firewall Management Center (FMC) 6.4.0.1, Cisco Secure Firewall Management Center (FMC) 6.4.0.3, Cisco Secure Firewall Management Center (FMC) 6.4.0.2, Cisco Secure Firewall Management Center (FMC) 6.4.0.4, Cisco Secure Firewall Management Center (FMC) 6.4.0.5, Cisco Secure Firewall Management Center (FMC) 6.4.0.6, Cisco Secure Firewall Management Center (FMC) 6.4.0.7, Cisco Secure Firewall Management Center (FMC) 6.4.0.8, Cisco Secure Firewall Management Center (FMC) 6.4.0.9, Cisco Secure Firewall Management Center (FMC) 6.4.0.10, Cisco Secure Firewall Management Center (FMC) 6.4.0.11, Cisco Secure Firewall Management Center (FMC) 6.4.0.12, Cisco Secure Firewall Management Center (FMC) 6.4.0.13, Cisco Secure Firewall Management Center (FMC) 6.4.0.14, Cisco Secure Firewall Management Center (FMC) 6.4.0.15, Cisco Secure Firewall Management Center (FMC) 6.4.0.16, Cisco Secure Firewall Management Center (FMC) 6.4.0.17, Cisco Secure Firewall Management Center (FMC) 6.4.0.18, Cisco Secure Firewall Management Center (FMC) 6.6.0, Cisco Secure Firewall Management Center (FMC) 6.6.0.1, Cisco Secure Firewall Management Center (FMC) 6.6.1, Cisco Secure Firewall Management Center (FMC) 6.6.3, Cisco Secure Firewall Management Center (FMC) 6.6.4, Cisco Secure Firewall Management Center (FMC) 6.6.5, Cisco Secure Firewall Management Center (FMC) 6.6.5.1, Cisco Secure Firewall Management Center (FMC) 6.6.5.2, Cisco Secure Firewall Management Center (FMC) 6.6.7, Cisco Secure Firewall Management Center (FMC) 6.6.7.1, Cisco Secure Firewall Management Center (FMC) 6.6.7.2, Cisco Secure Firewall Management Center (FMC) 7.0.0, Cisco Secure Firewall Management Center (FMC) 7.0.0.1, Cisco Secure Firewall Management Center (FMC) 7.0.1, Cisco Secure Firewall Management Center (FMC) 7.0.1.1, Cisco Secure Firewall Management Center (FMC) 7.0.2, Cisco Secure Firewall Management Center (FMC) 7.0.2.1, Cisco Secure Firewall Management Center (FMC) 7.0.3, Cisco Secure Firewall Management Center (FMC) 7.0.4, Cisco Secure Firewall Management Center (FMC) 7.0.5, Cisco Secure Firewall Management Center (FMC) 7.0.6, Cisco Secure Firewall Management Center (FMC) 7.0.6.1, Cisco Secure Firewall Management Center (FMC) 7.0.6.2, Cisco Secure Firewall Management Center (FMC) 7.1.0, Cisco Secure Firewall Management Center (FMC) 7.1.0.1, Cisco Secure Firewall Management Center (FMC) 7.1.0.2, Cisco Secure Firewall Management Center (FMC) 7.1.0.3, Cisco Secure Firewall Management Center (FMC) 7.2.0, Cisco Secure Firewall Management Center (FMC) 7.2.1, Cisco Secure Firewall Management Center (FMC) 7.2.2, Cisco Secure Firewall Management Center (FMC) 7.2.0.1, Cisco Secure Firewall Management Center (FMC) 7.2.3, Cisco Secure Firewall Management Center (FMC) 7.2.3.1, Cisco Secure Firewall Management Center (FMC) 7.2.4, Cisco Secure Firewall Management Center (FMC) 7.2.4.1, Cisco Secure Firewall Management Center (FMC) 7.2.5, Cisco Secure Firewall Management Center (FMC) 7.2.5.1, Cisco Secure Firewall Management Center (FMC) 7.2.6, Cisco Secure Firewall Management Center (FMC) 7.2.7, Cisco Secure Firewall Management Center (FMC) 7.2.5.2, Cisco Secure Firewall Management Center (FMC) 7.2.8, Cisco Secure Firewall Management Center (FMC) 7.2.8.1, Cisco Secure Firewall Management Center (FMC) 7.3.0, Cisco Secure Firewall Management Center (FMC) 7.3.1, Cisco Secure Firewall Management Center (FMC) 7.3.1.1, Cisco Secure Firewall Management Center (FMC) 7.3.1.2, Cisco Secure Firewall Management Center (FMC) 7.4.0, Cisco Secure Firewall Management Center (FMC) 7.4.1, Cisco Secure Firewall Management Center (FMC) 7.4.1.1, Cisco Secure Firewall Management Center (FMC) 7.4.2, Cisco Secure Firewall Management Center (FMC), Cisco Secure Firewall Management Center (FMC) Appliances

Related Products

Product CVE Evidence
Cisco Nexus Dashboard CVE-2024-20415 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20410 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20409 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20403 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20386 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20372 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20364 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20300 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20298 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20273 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20269 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2024-20264 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20415 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20410 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20409 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20403 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20386 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20372 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20364 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20300 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20298 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20273 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20269 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20264 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20415 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20410 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20409 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20403 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20386 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20372 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20364 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20300 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20298 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20273 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20269 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2024-20264 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20415 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20410 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20409 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20403 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20386 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20372 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20364 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20300 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20298 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20273 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20269 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20264 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20415 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20410 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20409 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20403 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20386 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20372 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20364 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20300 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20298 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20273 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20269 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) Appliances CVE-2024-20264 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20415 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20410 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20409 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20403 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20386 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20372 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20364 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20300 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20298 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20273 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20269 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2024-20264 Cisco OpenVuln