cisco firepower management center 5.4.1.2 vulnerabilities and exploits

(subscribe to this query)

The web interface in Cisco Firepower Management Center 5.4.0 up to and including 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517.

Cisco Firepower Management Center 5.4.0.2 Cisco Firepower Management Center 6.0.0.1 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 5.4.1.6 Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.4.1.3

The Threat Management Console in Cisco Firepower Management Center 5.2.0 up to and including 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.

Cisco Firepower Management Center 5.2.0 Cisco Firepower Management Center 5.3.0 Cisco Firepower Management Center 5.3.0.2 Cisco Firepower Management Center 5.3.0.3 Cisco Firepower Management Center 5.3.0.4 Cisco Firepower Management Center 5.3.1 Cisco Firepower Management Center 5.3.1.3 Cisco Firepower Management Center 5.3.1.4 Cisco Firepower Management Center 5.3.1.5 Cisco Firepower Management Center 5.3.1.6 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 5.4.0.2 Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 5.4.1.6 Cisco Firepower Management Center 6.0.1

2 EDB exploits

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software prior to 6.0.1 could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition due to the Snort process unexpectedly restarting. The vulnerabi...

Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 5.3.1.3 Cisco Firepower Management Center 5.3.1.4 Cisco Firepower Management Center 5.3.0.2 Cisco Firepower Management Center 5.3.0.4 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 5.4.0.2 Cisco Firepower Management Center 5.3.0 Cisco Firepower Management Center 5.4.1.6 Cisco Firepower Management Center 5.3.1.5 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.4 Base Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.3.1 Cisco Firepower Management Center 5.3.0.3 Cisco Firepower Management Center 5.3.1.6 Cisco Firepower Management Center 6.0.0 Cisco Firepower Management Center 6.0.0.1 Cisco Firepower Management Center 6.0.0.0 Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 6.0.1

The device login page in Cisco FirePOWER Management Center 5.3 up to and including 6.0.0.1 allows remote malicious users to obtain potentially sensitive software-version information by reading help files, aka Bug ID CSCuy36654.

Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 6.0.0.1 Cisco Firepower Management Center 5.3.1.3 Cisco Firepower Management Center 5.4 Base Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.3.1.5 Cisco Firepower Management Center 5.3.1.6 Cisco Firepower Management Center 5.3 Base Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 6.0 Base Cisco Firepower Management Center 6.0.0 Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.3.0.3 Cisco Firepower Management Center 5.3.1.4

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web interface. More Information: CSCvc38801. Known Affected Releases: 6.0.1.3 6.2.1. ...

Cisco Firepower Management Center 6.0.1.1 Cisco Firepower Management Center 6.0.0.0 Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.4 Base Cisco Firepower Management Center 6.0.1 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.4.0.2 Cisco Firepower Management Center 5.4.1.9 Cisco Firepower Management Center 6.2.0.2 Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 6.0.0 Cisco Firepower Management Center 6.0.0.1 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 6.2.0 Cisco Firepower Management Center 5.4.1.6 Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 6.1.0.2 Cisco Firepower Management Center 6.1.0 Cisco Firepower Management Center 6.0.1.3 Cisco Firepower Management Center 6.0 Base

A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. Affected Products: Cisco Firepower M...

Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.3.1.7 Cisco Firepower Management Center 5.4.0.2 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 5.4.1.6 Cisco Firepower Management Center 5.4.1.9 Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.4.1.1

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web interface. Affected Products: Cisco Firepower Management Center Releases 5.4.1.x ...

Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 5.4.1.6 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 5.4.0.2 Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.4.1.5

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software up to and including 6.1.0 allows remote malicious users to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.

Cisco Firesight System Software 5.2.0.3 Cisco Firesight System Software 5.2.0.4 Cisco Firesight System Software 5.3.1.1 Cisco Firesight System Software 6.0.0 Cisco Firesight System Software 5.3.1.4 Cisco Firesight System Software 5.4.0.1 Cisco Firesight System Software 5.3.0.3 Cisco Firesight System Software 5.3.0.4 Cisco Firesight System Software 5.4.0.6 Cisco Firesight System Software 5.2.0 Cisco Firesight System Software 5.3.0 Cisco Firesight System Software 5.3.0.1 Cisco Firesight System Software 5.3.0.2 Cisco Firesight System Software 5.3.1 Cisco Firesight System Software 5.4.1.2 Cisco Firesight System Software 5.4.1.3 Cisco Firesight System Software 5.4.1.4 Cisco Firesight System Software 6.0.0.1 Cisco Firesight System Software 5.3.0.7 Cisco Firesight System Software 5.4.0.2 Cisco Firesight System Software 5.2.0.1 Cisco Firesight System Software 5.2.0.2

Cisco Firepower Management Center prior to 6.1 and FireSIGHT System Software prior to 6.1, when certain malware blocking options are enabled, allow remote malicious users to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.

Cisco Firesight System Software 5.3.0 Cisco Firesight System Software 5.1.0.1 Cisco Firesight System Software 5.1.1.5 Cisco Firesight System Software 5.1.1.6 Cisco Firesight System Software 5.2.0.3 Cisco Firesight System Software 5.2.0.4 Cisco Firesight System Software 5.1.1 Cisco Firesight System Software 5.1.1.1 Cisco Firesight System Software 5.1.1.2 Cisco Firesight System Software 5.1.1.10 Cisco Firesight System Software 5.1.1.11 Cisco Firesight System Software 5.3.0.1 Cisco Firesight System Software 5.3.0.2 Cisco Firesight System Software 5.4.1.2 Cisco Firesight System Software 5.3.1.5 Cisco Firesight System Software 5.4.1.4 Cisco Firesight System Software 6.0.0.1 Cisco Firesight System Software 5.4.0.2 Cisco Firesight System Software 5.4.0.3 Cisco Firesight System Software 5.3.1.1 Cisco Firesight System Software 6.0.0 Cisco Firesight System Software 5.4.0.1

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center prior to 6.1 and FireSIGHT System Software prior to 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz...

Cisco Firesight System Software 5.4.0.6 Cisco Firesight System Software 5.3.0.4 Cisco Firesight System Software 5.3.0.3 Cisco Firesight System Software 5.3.1.4 Cisco Firesight System Software 5.2.0.8 Cisco Firesight System Software 5.3.1.1 Cisco Firesight System Software 5.4.1 Cisco Firesight System Software 5.2.0.3 Cisco Firesight System Software 5.2.0.2 Cisco Firesight System Software 5.2.0.1 Cisco Firesight System Software 5.1.1.4 Cisco Firesight System Software 5.1.1.3 Cisco Firesight System Software 5.3.0 Cisco Firesight System Software 5.2.0 Cisco Firesight System Software 5.4.0.2 Cisco Firesight System Software 5.3.0.7 Cisco Firesight System Software 5.4.1.3 Cisco Firesight System Software 5.4.0.4 Cisco Firesight System Software 5.3.1 Cisco Firesight System Software 5.3.1.3 Cisco Firesight System Software 5.3.0.1 Cisco Firesight System Software 5.2.0.6

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook