4.8

CVE-2021-34763

Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this advisory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Secure Firewall Threat Defense Version < 6.4.0.13
Cisco ≫ Secure Firewall Threat Defense Version >= 6.5.0 < 6.6.5
Cisco ≫ Secure Firewall Threat Defense Version >= 6.7.0 < 6.7.0.3
Cisco ≫ Sourcefire Defense Center Version 6.1.0
Cisco ≫ Sourcefire Defense Center Version 6.2.0
Cisco ≫ Sourcefire Defense Center Version 6.2.3
Cisco ≫ Sourcefire Defense Center Version 6.3.0
Cisco ≫ Sourcefire Defense Center Version 6.4.0
Cisco ≫ Sourcefire Defense Center Version 6.5.0
Cisco ≫ Sourcefire Defense Center Version 6.6.0
Cisco ≫ Sourcefire Defense Center Version 6.6.1
Cisco ≫ Sourcefire Defense Center Version 6.7.0
Cisco ≫ Sourcefire Defense Center Version 7.0.0
Cisco ≫ Sourcefire Defense Center Version 7.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.394
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.8 1.7 2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
Cisco PSIRT 4.8 1.7 2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-openredir-TVPMWJyg
Vendor Advisory