Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
312
VMScore

CVE-2019-15269

Published: 16/10/2019 Updated: 22/10/2019
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 4.8 | Impact Score: 2.7 | Exploitability Score: 1.7
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the malicious user to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firepower management center 2600 firmware -

cisco firepower management center 2600 firmware 6.3.0

cisco firepower management center 2600 firmware 6.4.0

cisco firepower management center 2600 firmware 6.5.0

cisco firepower management center 2600 firmware 6.6.0

cisco firepower appliance 7030 firmware -

cisco firepower appliance 7030 firmware 6.3.0

cisco firepower appliance 7030 firmware 6.4.0

cisco firepower appliance 7030 firmware 6.5.0

cisco firepower appliance 7030 firmware 6.6.0

cisco firepower appliance 7110 firmware -

cisco firepower appliance 7110 firmware 6.3.0

cisco firepower appliance 7110 firmware 6.4.0

cisco firepower appliance 7110 firmware 6.5.0

cisco firepower appliance 7110 firmware 6.6.0

cisco firepower appliance 7115 firmware -

cisco firepower appliance 7115 firmware 6.3.0

cisco firepower appliance 7115 firmware 6.4.0

cisco firepower appliance 7115 firmware 6.5.0

cisco firepower appliance 7115 firmware 6.6.0

cisco firepower management center virtual appliance firmware -

cisco firepower management center virtual appliance firmware 6.3.0

cisco firepower management center virtual appliance firmware 6.4.0

cisco firepower management center virtual appliance firmware 6.5.0

cisco firepower management center virtual appliance firmware 6.6.0

cisco firepower management center 2000 firmware -

cisco firepower management center 2000 firmware 6.3.0

cisco firepower management center 2000 firmware 6.4.0

cisco firepower management center 2000 firmware 6.5.0

cisco firepower management center 2000 firmware 6.6.0

cisco firepower management center 1000 firmware -

cisco firepower management center 1000 firmware 6.3.0

cisco firepower management center 1000 firmware 6.4.0

cisco firepower management center 1000 firmware 6.5.0

cisco firepower management center 1000 firmware 6.6.0

cisco firesight management center 3500 firmware -

cisco firesight management center 3500 firmware 6.3.0

cisco firesight management center 3500 firmware 6.4.0

cisco firesight management center 3500 firmware 6.5.0

cisco firesight management center 3500 firmware 6.6.0

cisco firepower appliance 7125 firmware -

cisco firepower appliance 7125 firmware 6.3.0

cisco firepower appliance 7125 firmware 6.4.0

cisco firepower appliance 7125 firmware 6.5.0

cisco firepower appliance 7125 firmware 6.6.0

cisco firepower management center 4000 firmware -

cisco firepower management center 4000 firmware 6.3.0

cisco firepower management center 4000 firmware 6.4.0

cisco firepower management center 4000 firmware 6.5.0

cisco firepower management center 4000 firmware 6.6.0

cisco firepower appliance 8290 firmware -

cisco firepower appliance 8290 firmware 6.3.0

cisco firepower appliance 8290 firmware 6.4.0

cisco firepower appliance 8290 firmware 6.5.0

cisco firepower appliance 8290 firmware 6.6.0

cisco firesight management center 1500 firmware -

cisco firesight management center 1500 firmware 6.3.0

cisco firesight management center 1500 firmware 6.4.0

cisco firesight management center 1500 firmware 6.5.0

cisco firesight management center 1500 firmware 6.6.0

cisco firesight management center 750 firmware -

cisco firesight management center 750 firmware 6.3.0

cisco firesight management center 750 firmware 6.4.0

cisco firesight management center 750 firmware 6.5.0

cisco firesight management center 750 firmware 6.6.0

cisco firepower appliance 7120 firmware -

cisco firepower appliance 7120 firmware 6.3.0

cisco firepower appliance 7120 firmware 6.4.0

cisco firepower appliance 7120 firmware 6.5.0

cisco firepower appliance 7120 firmware 6.6.0

cisco firepower appliance 7010 firmware -

cisco firepower appliance 7010 firmware 6.3.0

cisco firepower appliance 7010 firmware 6.4.0

cisco firepower appliance 7010 firmware 6.5.0

cisco firepower appliance 7010 firmware 6.6.0

cisco firepower appliance 8370 firmware -

cisco firepower appliance 8370 firmware 6.3.0

cisco firepower appliance 8370 firmware 6.4.0

cisco firepower appliance 8370 firmware 6.5.0

cisco firepower appliance 8370 firmware 6.6.0

cisco firepower management center 1600 firmware -

cisco firepower management center 1600 firmware 6.3.0

cisco firepower management center 1600 firmware 6.4.0

cisco firepower management center 1600 firmware 6.5.0

cisco firepower management center 1600 firmware 6.6.0

cisco firepower appliance 7020 firmware -

cisco firepower appliance 7020 firmware 6.3.0

cisco firepower appliance 7020 firmware 6.4.0

cisco firepower appliance 7020 firmware 6.5.0

cisco firepower appliance 7020 firmware 6.6.0

cisco amp 8150 firmware -

cisco amp 8150 firmware 6.3.0

cisco amp 8150 firmware 6.4.0

cisco amp 8150 firmware 6.5.0

cisco amp 8150 firmware 6.6.0

cisco firepower appliance 8130 firmware -

cisco firepower appliance 8130 firmware 6.3.0

cisco firepower appliance 8130 firmware 6.4.0

cisco firepower appliance 8130 firmware 6.5.0

cisco firepower appliance 8130 firmware 6.6.0

cisco ngips virtual appliance firmware -

cisco ngips virtual appliance firmware 6.3.0

cisco ngips virtual appliance firmware 6.4.0

cisco ngips virtual appliance firmware 6.5.0

cisco ngips virtual appliance firmware 6.6.0

cisco firepower appliance 8390 firmware -

cisco firepower appliance 8390 firmware 6.3.0

cisco firepower appliance 8390 firmware 6.4.0

cisco firepower appliance 8390 firmware 6.5.0

cisco firepower appliance 8390 firmware 6.6.0

cisco firepower appliance 8270 firmware -

cisco firepower appliance 8270 firmware 6.3.0

cisco firepower appliance 8270 firmware 6.4.0

cisco firepower appliance 8270 firmware 6.5.0

cisco firepower appliance 8270 firmware 6.6.0

cisco firepower management center 4500 firmware -

cisco firepower management center 4500 firmware 6.3.0

cisco firepower management center 4500 firmware 6.4.0

cisco firepower management center 4500 firmware 6.5.0

cisco firepower management center 4500 firmware 6.6.0

cisco firepower appliance 8250 firmware -

cisco firepower appliance 8250 firmware 6.3.0

cisco firepower appliance 8250 firmware 6.4.0

cisco firepower appliance 8250 firmware 6.5.0

cisco firepower appliance 8250 firmware 6.6.0

cisco firepower management center 4600 firmware -

cisco firepower management center 4600 firmware 6.3.0

cisco firepower management center 4600 firmware 6.4.0

cisco firepower management center 4600 firmware 6.5.0

cisco firepower management center 4600 firmware 6.6.0

cisco firepower management center 2500 firmware -

cisco firepower management center 2500 firmware 6.3.0

cisco firepower management center 2500 firmware 6.4.0

cisco firepower management center 2500 firmware 6.5.0

cisco firepower management center 2500 firmware 6.6.0

cisco firepower appliance 8120 firmware -

cisco firepower appliance 8120 firmware 6.3.0

cisco firepower appliance 8120 firmware 6.4.0

cisco firepower appliance 8120 firmware 6.5.0

cisco firepower appliance 8120 firmware 6.6.0

cisco amp 7150 firmware -

cisco amp 7150 firmware 6.3.0

cisco amp 7150 firmware 6.4.0

cisco amp 7150 firmware 6.5.0

cisco amp 7150 firmware 6.6.0

cisco firepower appliance 8350 firmware -

cisco firepower appliance 8350 firmware 6.3.0

cisco firepower appliance 8350 firmware 6.4.0

cisco firepower appliance 8350 firmware 6.5.0

cisco firepower appliance 8350 firmware 6.6.0

cisco firepower appliance 8140 firmware -

cisco firepower appliance 8140 firmware 6.3.0

cisco firepower appliance 8140 firmware 6.4.0

cisco firepower appliance 8140 firmware 6.5.0

cisco firepower appliance 8140 firmware 6.6.0

cisco firepower appliance 7050 firmware -

cisco firepower appliance 7050 firmware 6.3.0

cisco firepower appliance 7050 firmware 6.4.0

cisco firepower appliance 7050 firmware 6.5.0

cisco firepower appliance 7050 firmware 6.6.0

cisco firepower appliance 8260 firmware -

cisco firepower appliance 8260 firmware 6.3.0

cisco firepower appliance 8260 firmware 6.4.0

cisco firepower appliance 8260 firmware 6.5.0

cisco firepower appliance 8260 firmware 6.6.0

cisco firepower appliance 8360 firmware -

cisco firepower appliance 8360 firmware 6.3.0

cisco firepower appliance 8360 firmware 6.4.0

cisco firepower appliance 8360 firmware 6.5.0

cisco firepower appliance 8360 firmware 6.6.0

Vendor Advisories

Cisco: Cisco Firepower Management Center Multiple Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface These vulnerabilities are due to insufficient validation of user-supplied input by the web-based ...

References

CWE-79https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-firepwr-xsshttps://nvd.nist.govhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-firepwr-xss
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692malicious code‎XML injectionCVE-2024-28020CVE-2024-35252CVE-2024-5833CVE-2024-30066injectionCVE-2024-23282
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook