Cisco Firepower Management Center Virtual Appliance vulnerabilities

8 CVEs affecting Cisco Firepower Management Center Virtual Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34781, published 2021-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34762, published 2021-10-27. High severity, CVSS 8.1. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an…
CVE-2021-34781, published 2021-10-27. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial…
CVE-2018-0365, published 2018-06-21. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and…
CVE-2021-34764, published 2021-10-27. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open…
CVE-2021-34763, published 2021-10-27. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open…
CVE-2021-34756, published 2021-10-27. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more…
CVE-2021-34755, published 2021-10-27. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more…
CVE-2021-34761, published 2021-10-27. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite or append arbitrary data to system files using root-level privileges. The…