VDB
BDU%3A2024-10830
BDU%3A2024-10830
PUBLISHED
CVSS 4.800000190734863 MEDIUM
Уязвимость веб-интерфейса управления программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center), позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
Risk Scores
CVSS 3.1
4.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Firepower Management Center | 7.3.1.2, 6.2.3.12, 6.2.3.1 |
| Cisco Systems Inc. | Cisco Firepower Management Center |
Timeline
- Oct 23, 2024 CVE Published
- Oct 23, 2024 PoC Published
- Dec 6, 2024 CVE Updated
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-M446vbEO url
- Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication url
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-dhJxQYZs url