CVE-2021-34763

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this advisory.

Score

CVSS 3.1 4.8 Medium

Status

Modified - psirt@cisco.com

Published

2021-10-27

Last modified

2024-11-07

Weaknesses

CWE-601, CWE-79

Affected products

• Cisco Firepower Management Center (Cisco)
• Firepower Management Center Virtual Appliance (Cisco)
• Secure Firewall Threat Defense (Cisco)
• Sourcefire Defense Center (Cisco)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-openredir-TVPMWJyg