Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-15269


Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.


Published

2019-10-16T19:15:14.440

Last Modified

2024-11-21T04:28:19.893

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

6.8

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-79
  • Type: Primary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco firepower_management_center_2600_firmware - Yes
Operating System cisco firepower_management_center_2600_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_2600_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_2600_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_2600_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_2600 - No
Operating System cisco firepower_appliance_7030_firmware - Yes
Operating System cisco firepower_appliance_7030_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_7030_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_7030_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_7030_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_7030 - No
Operating System cisco firepower_appliance_7110_firmware - Yes
Operating System cisco firepower_appliance_7110_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_7110_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_7110_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_7110_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_7110 - No
Operating System cisco firepower_appliance_7115_firmware - Yes
Operating System cisco firepower_appliance_7115_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_7115_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_7115_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_7115_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_7115 - No
Operating System cisco firepower_management_center_virtual_appliance_firmware - Yes
Operating System cisco firepower_management_center_virtual_appliance_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_virtual_appliance_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_virtual_appliance_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_virtual_appliance_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_virtual_appliance - No
Operating System cisco firepower_management_center_2000_firmware - Yes
Operating System cisco firepower_management_center_2000_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_2000_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_2000_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_2000_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_2000 - No
Operating System cisco firepower_management_center_1000_firmware - Yes
Operating System cisco firepower_management_center_1000_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_1000_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_1000_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_1000_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_1000 - No
Operating System cisco firesight_management_center_3500_firmware - Yes
Operating System cisco firesight_management_center_3500_firmware 6.3.0 Yes
Operating System cisco firesight_management_center_3500_firmware 6.4.0 Yes
Operating System cisco firesight_management_center_3500_firmware 6.5.0 Yes
Operating System cisco firesight_management_center_3500_firmware 6.6.0 Yes
Hardware cisco firesight_management_center_3500 - No
Operating System cisco firepower_appliance_7125_firmware - Yes
Operating System cisco firepower_appliance_7125_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_7125_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_7125_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_7125_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_7125 - No
Operating System cisco firepower_management_center_4000_firmware - Yes
Operating System cisco firepower_management_center_4000_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_4000_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_4000_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_4000_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_4000 - No
Operating System cisco firepower_appliance_8290_firmware - Yes
Operating System cisco firepower_appliance_8290_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8290_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8290_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8290_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8290 - No
Operating System cisco firesight_management_center_1500_firmware - Yes
Operating System cisco firesight_management_center_1500_firmware 6.3.0 Yes
Operating System cisco firesight_management_center_1500_firmware 6.4.0 Yes
Operating System cisco firesight_management_center_1500_firmware 6.5.0 Yes
Operating System cisco firesight_management_center_1500_firmware 6.6.0 Yes
Hardware cisco firesight_management_center_1500 - No
Operating System cisco firesight_management_center_750_firmware - Yes
Operating System cisco firesight_management_center_750_firmware 6.3.0 Yes
Operating System cisco firesight_management_center_750_firmware 6.4.0 Yes
Operating System cisco firesight_management_center_750_firmware 6.5.0 Yes
Operating System cisco firesight_management_center_750_firmware 6.6.0 Yes
Hardware cisco firesight_management_center_750 - No
Operating System cisco firepower_appliance_7120_firmware - Yes
Operating System cisco firepower_appliance_7120_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_7120_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_7120_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_7120_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_7120 - No
Operating System cisco firepower_appliance_7010_firmware - Yes
Operating System cisco firepower_appliance_7010_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_7010_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_7010_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_7010_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_7010 - No
Operating System cisco firepower_appliance_8370_firmware - Yes
Operating System cisco firepower_appliance_8370_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8370_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8370_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8370_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8370 - No
Operating System cisco firepower_management_center_1600_firmware - Yes
Operating System cisco firepower_management_center_1600_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_1600_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_1600_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_1600_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_1600 - No
Operating System cisco firepower_appliance_7020_firmware - Yes
Operating System cisco firepower_appliance_7020_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_7020_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_7020_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_7020_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_7020 - No
Operating System cisco amp_8150_firmware - Yes
Operating System cisco amp_8150_firmware 6.3.0 Yes
Operating System cisco amp_8150_firmware 6.4.0 Yes
Operating System cisco amp_8150_firmware 6.5.0 Yes
Operating System cisco amp_8150_firmware 6.6.0 Yes
Hardware cisco amp_8150 - No
Operating System cisco firepower_appliance_8130_firmware - Yes
Operating System cisco firepower_appliance_8130_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8130_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8130_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8130_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8130 - No
Operating System cisco ngips_virtual_appliance_firmware - Yes
Operating System cisco ngips_virtual_appliance_firmware 6.3.0 Yes
Operating System cisco ngips_virtual_appliance_firmware 6.4.0 Yes
Operating System cisco ngips_virtual_appliance_firmware 6.5.0 Yes
Operating System cisco ngips_virtual_appliance_firmware 6.6.0 Yes
Hardware cisco ngips_virtual_appliance - No
Operating System cisco firepower_appliance_8390_firmware - Yes
Operating System cisco firepower_appliance_8390_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8390_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8390_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8390_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8390 - No
Operating System cisco firepower_appliance_8270_firmware - Yes
Operating System cisco firepower_appliance_8270_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8270_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8270_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8270_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8270 - No
Operating System cisco firepower_management_center_4500_firmware - Yes
Operating System cisco firepower_management_center_4500_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_4500_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_4500_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_4500_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_4500 - No
Operating System cisco firepower_appliance_8250_firmware - Yes
Operating System cisco firepower_appliance_8250_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8250_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8250_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8250_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8250 - No
Operating System cisco firepower_management_center_4600_firmware - Yes
Operating System cisco firepower_management_center_4600_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_4600_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_4600_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_4600_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_4600 - No
Operating System cisco firepower_management_center_2500_firmware - Yes
Operating System cisco firepower_management_center_2500_firmware 6.3.0 Yes
Operating System cisco firepower_management_center_2500_firmware 6.4.0 Yes
Operating System cisco firepower_management_center_2500_firmware 6.5.0 Yes
Operating System cisco firepower_management_center_2500_firmware 6.6.0 Yes
Hardware cisco firepower_management_center_2500 - No
Operating System cisco firepower_appliance_8120_firmware - Yes
Operating System cisco firepower_appliance_8120_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8120_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8120_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8120_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8120 - No
Operating System cisco amp_7150_firmware - Yes
Operating System cisco amp_7150_firmware 6.3.0 Yes
Operating System cisco amp_7150_firmware 6.4.0 Yes
Operating System cisco amp_7150_firmware 6.5.0 Yes
Operating System cisco amp_7150_firmware 6.6.0 Yes
Hardware cisco amp_7150 - No
Operating System cisco firepower_appliance_8350_firmware - Yes
Operating System cisco firepower_appliance_8350_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8350_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8350_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8350_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8350 - No
Operating System cisco firepower_appliance_8140_firmware - Yes
Operating System cisco firepower_appliance_8140_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8140_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8140_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8140_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8140 - No
Operating System cisco firepower_appliance_7050_firmware - Yes
Operating System cisco firepower_appliance_7050_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_7050_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_7050_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_7050_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_7050 - No
Operating System cisco firepower_appliance_8260_firmware - Yes
Operating System cisco firepower_appliance_8260_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8260_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8260_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8260_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8260 - No
Operating System cisco firepower_appliance_8360_firmware - Yes
Operating System cisco firepower_appliance_8360_firmware 6.3.0 Yes
Operating System cisco firepower_appliance_8360_firmware 6.4.0 Yes
Operating System cisco firepower_appliance_8360_firmware 6.5.0 Yes
Operating System cisco firepower_appliance_8360_firmware 6.6.0 Yes
Hardware cisco firepower_appliance_8360 - No

References