Vulnerabilities > Cisco > Firepower Threat Defense > 6.4.0.12

DATE CVE VULNERABILITY TITLE RISK
2020-02-26 CVE-2020-3166 Improper Input Validation vulnerability in Cisco Firepower Threat Defense
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS).
local
low complexity
cisco CWE-20
6.7
6.7
2019-08-08 CVE-2019-1970 Protection Mechanism Failure vulnerability in Cisco Firepower Threat Defense
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system.
network
low complexity
cisco CWE-693
7.5
7.5