Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.

Project Subscriptions

Vendors Products
Amp 7150 Subscribe
Amp 7150 Firmware Subscribe
Amp 8150 Subscribe
Amp 8150 Firmware Subscribe
Firepower Appliance 7010 Subscribe
Firepower Appliance 7010 Firmware Subscribe
Firepower Appliance 7020 Subscribe
Firepower Appliance 7020 Firmware Subscribe
Firepower Appliance 7030 Subscribe
Firepower Appliance 7030 Firmware Subscribe
Firepower Appliance 7050 Subscribe
Firepower Appliance 7050 Firmware Subscribe
Firepower Appliance 7110 Subscribe
Firepower Appliance 7110 Firmware Subscribe
Firepower Appliance 7115 Subscribe
Firepower Appliance 7115 Firmware Subscribe
Firepower Appliance 7120 Subscribe
Firepower Appliance 7120 Firmware Subscribe
Firepower Appliance 7125 Subscribe
Firepower Appliance 7125 Firmware Subscribe
Firepower Appliance 8120 Subscribe
Firepower Appliance 8120 Firmware Subscribe
Firepower Appliance 8130 Subscribe
Firepower Appliance 8130 Firmware Subscribe
Firepower Appliance 8140 Subscribe
Firepower Appliance 8140 Firmware Subscribe
Firepower Appliance 8250 Subscribe
Firepower Appliance 8250 Firmware Subscribe
Firepower Appliance 8260 Subscribe
Firepower Appliance 8260 Firmware Subscribe
Firepower Appliance 8270 Subscribe
Firepower Appliance 8270 Firmware Subscribe
Firepower Appliance 8290 Subscribe
Firepower Appliance 8290 Firmware Subscribe
Firepower Appliance 8350 Subscribe
Firepower Appliance 8350 Firmware Subscribe
Firepower Appliance 8360 Subscribe
Firepower Appliance 8360 Firmware Subscribe
Firepower Appliance 8370 Subscribe
Firepower Appliance 8370 Firmware Subscribe
Firepower Appliance 8390 Subscribe
Firepower Appliance 8390 Firmware Subscribe
Firepower Management Center 1000 Subscribe
Firepower Management Center 1000 Firmware Subscribe
Firepower Management Center 1600 Subscribe
Firepower Management Center 1600 Firmware Subscribe
Firepower Management Center 2000 Subscribe
Firepower Management Center 2000 Firmware Subscribe
Firepower Management Center 2500 Subscribe
Firepower Management Center 2500 Firmware Subscribe
Firepower Management Center 2600 Subscribe
Firepower Management Center 2600 Firmware Subscribe
Firepower Management Center 4000 Subscribe
Firepower Management Center 4000 Firmware Subscribe
Firepower Management Center 4500 Subscribe
Firepower Management Center 4500 Firmware Subscribe
Firepower Management Center 4600 Subscribe
Firepower Management Center 4600 Firmware Subscribe
Firepower Management Center Virtual Appliance Subscribe
Firepower Management Center Virtual Appliance Firmware Subscribe
Firesight Management Center 1500 Subscribe
Firesight Management Center 1500 Firmware Subscribe
Firesight Management Center 3500 Subscribe
Firesight Management Center 3500 Firmware Subscribe
Firesight Management Center 750 Subscribe
Firesight Management Center 750 Firmware Subscribe
Ngips Virtual Appliance Subscribe
Ngips Virtual Appliance Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2019-6277 Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 21 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-11-21T19:07:27.044Z

Reserved: 2019-08-20T00:00:00

Link: CVE-2019-15269

cve-icon Vulnrichment

Updated: 2024-08-05T00:42:00.509Z

cve-icon NVD

Status : Modified

Published: 2019-10-16T19:15:14.440

Modified: 2024-11-21T04:28:19.893

Link: CVE-2019-15269

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses