Firepower Management Center Virtual Appliance Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2021-08-18	CVE-2021-34749	Information Exposure vulnerability in Cisco products A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine could allow an unauthenticated, remote attacker to bypass filtering technology on an affected device and exfiltrate data from a compromised host. network low complexity cisco CWE-200	8.6
2019-10-16	CVE-2019-15269	Cross-site Scripting vulnerability in Cisco products Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. network low complexity cisco CWE-79	4.8
2019-10-16	CVE-2019-15268	Cross-site Scripting vulnerability in Cisco products Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. network low complexity cisco CWE-79	4.8