Cisco Firepower Management Center Virtual Appliance Firmware vulnerabilities

3 CVEs affecting Cisco Firepower Management Center Virtual Appliance Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34749, published 2021-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34749, published 2021-08-18. High severity, CVSS 8.6. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine could allow an…
CVE-2019-15268, published 2019-10-16. Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
CVE-2019-15269, published 2019-10-16. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack…