High WID-SEC-2023-2811 9 CVEs

Cisco Firepower Management Center: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Nov 1, 2023 · Updated Nov 1, 2023 · de-DE

Vendor: Cisco Product: Firepower Management Center Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Cisco Firepower Management Center ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.

Product

Firepower ist eine Firewall-Plattform von Cisco

Vulnerabilities 9

Critical 9.9

CVE-2023-20048 Public exploit EPSS 21%

A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authen…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023
High 7.5

CVE-2023-20155

A vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, re…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023
High 7.2

CVE-2023-20219

Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allo…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023
High 7.2

CVE-2023-20220

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023
Medium 6.5

CVE-2023-20114

A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authent…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023
Medium 6.1

CVE-2023-20206

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023
Medium 4.8

CVE-2023-20005

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023
Medium 4.8

CVE-2023-20041

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023
Medium 4.8

CVE-2023-20074

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…

Cisco Cisco Firepower Management Center Network devices

Nov 1, 2023

Revision history

2023-11-01 #1
Initiale Fassung

References

Cisco Security Advisory vom 2023-11-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-sK2gkfvJ
Cisco Security Advisory vom 2023-11-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-logview-dos-AYJdeX55
Cisco Security Advisory vom 2023-11-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-file-download-7js4ug2J
Cisco Security Advisory vom 2023-11-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmdinj-bTEgufOX
Cisco Security Advisory vom 2023-11-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-29MP49hN