CVE-2025-20302: Cisco Secure Firewall Management Center

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by directly accessing a generated report file for a different domain that is managed on the same Cisco Secure FMC instance. A successful exploit could allow the attacker to access a previously run report for a different domain, which could allow an attacker to read activity recorded in that domain.

Affected products

• Cisco Secure Firewall Management Center: version 6.2.3 only; version 6.2.3.1 only; version 6.2.3.2 only; version 6.2.3.3 only; version 6.2.3.4 only; version 6.2.3.5 only; …

Published 2025-08-14. Last modified 2026-06-17.