Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability

6.1 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.

Basic Information

ID CVE-2025-20235

Source cisco

Published Aug 14, 2025 at 16:28

Modified Aug 14, 2025 at 19:20

Affected Product

Vendor Cisco

Product Cisco Firepower Management Center

Version 6.2.3.12

Affected Versions Cisco Cisco Firepower Management Center 6.2.3.12
Cisco Cisco Firepower Management Center 6.2.3.1
Cisco Cisco Firepower Management Center 6.2.3.10
Cisco Cisco Firepower Management Center 6.2.3.8
Cisco Cisco Firepower Management Center 6.4.0.6
Cisco Cisco Firepower Management Center 6.2.3
Cisco Cisco Firepower Management Center 6.4.0.7
Cisco Cisco Firepower Management Center 6.2.3.13
Cisco Cisco Firepower Management Center 6.2.3.5
Cisco Cisco Firepower Management Center 6.4.0.4
Cisco Cisco Firepower Management Center 6.2.3.9
Cisco Cisco Firepower Management Center 6.2.3.14
Cisco Cisco Firepower Management Center 6.4.0.1
Cisco Cisco Firepower Management Center 6.2.3.6
Cisco Cisco Firepower Management Center 6.2.3.11
Cisco Cisco Firepower Management Center 6.4.0.8
Cisco Cisco Firepower Management Center 6.2.3.2
Cisco Cisco Firepower Management Center 6.4.0.2
Cisco Cisco Firepower Management Center 6.2.3.3
Cisco Cisco Firepower Management Center 6.4.0.3
Cisco Cisco Firepower Management Center 6.2.3.7
Cisco Cisco Firepower Management Center 6.2.3.4
Cisco Cisco Firepower Management Center 6.4.0.5
Cisco Cisco Firepower Management Center 6.4.0
Cisco Cisco Firepower Management Center 6.2.3.15
Cisco Cisco Firepower Management Center 6.6.0
Cisco Cisco Firepower Management Center 6.4.0.9
Cisco Cisco Firepower Management Center 6.2.3.16
Cisco Cisco Firepower Management Center 6.6.0.1
Cisco Cisco Firepower Management Center 6.6.1
Cisco Cisco Firepower Management Center 6.4.0.10
Cisco Cisco Firepower Management Center 6.4.0.11
Cisco Cisco Firepower Management Center 6.6.3
Cisco Cisco Firepower Management Center 6.6.4
Cisco Cisco Firepower Management Center 6.4.0.12
Cisco Cisco Firepower Management Center 7.0.0
Cisco Cisco Firepower Management Center 6.2.3.17
Cisco Cisco Firepower Management Center 7.0.0.1
Cisco Cisco Firepower Management Center 6.6.5
Cisco Cisco Firepower Management Center 7.0.1
Cisco Cisco Firepower Management Center 7.1.0
Cisco Cisco Firepower Management Center 6.6.5.1
Cisco Cisco Firepower Management Center 6.4.0.13
Cisco Cisco Firepower Management Center 7.0.1.1
Cisco Cisco Firepower Management Center 6.2.3.18
Cisco Cisco Firepower Management Center 6.4.0.14
Cisco Cisco Firepower Management Center 6.6.5.2
Cisco Cisco Firepower Management Center 7.1.0.1
Cisco Cisco Firepower Management Center 7.0.2
Cisco Cisco Firepower Management Center 6.4.0.15
Cisco Cisco Firepower Management Center 7.2.0
Cisco Cisco Firepower Management Center 7.0.2.1
Cisco Cisco Firepower Management Center 7.0.3
Cisco Cisco Firepower Management Center 6.6.7
Cisco Cisco Firepower Management Center 7.1.0.2
Cisco Cisco Firepower Management Center 7.2.0.1
Cisco Cisco Firepower Management Center 7.0.4
Cisco Cisco Firepower Management Center 7.2.1
Cisco Cisco Firepower Management Center 7.0.5
Cisco Cisco Firepower Management Center 6.4.0.16
Cisco Cisco Firepower Management Center 7.3.0
Cisco Cisco Firepower Management Center 7.2.2
Cisco Cisco Firepower Management Center 6.6.7.1
Cisco Cisco Firepower Management Center 7.3.1
Cisco Cisco Firepower Management Center 7.2.3
Cisco Cisco Firepower Management Center 7.1.0.3
Cisco Cisco Firepower Management Center 7.2.3.1
Cisco Cisco Firepower Management Center 7.2.4
Cisco Cisco Firepower Management Center 7.0.6
Cisco Cisco Firepower Management Center 7.2.4.1
Cisco Cisco Firepower Management Center 7.2.5
Cisco Cisco Firepower Management Center 7.3.1.1
Cisco Cisco Firepower Management Center 7.4.0
Cisco Cisco Firepower Management Center 6.4.0.17
Cisco Cisco Firepower Management Center 7.0.6.1
Cisco Cisco Firepower Management Center 7.2.5.1
Cisco Cisco Firepower Management Center 7.4.1
Cisco Cisco Firepower Management Center 7.2.6
Cisco Cisco Firepower Management Center 7.4.1.1
Cisco Cisco Firepower Management Center 7.0.6.2
Cisco Cisco Firepower Management Center 6.4.0.18
Cisco Cisco Firepower Management Center 6.6.7.2
Cisco Cisco Firepower Management Center 7.2.7
Cisco Cisco Firepower Management Center 7.2.5.2
Cisco Cisco Firepower Management Center 7.3.1.2
Cisco Cisco Firepower Management Center 7.2.8
Cisco Cisco Firepower Management Center 7.6.0
Cisco Cisco Firepower Management Center 7.4.2
Cisco Cisco Firepower Management Center 7.2.8.1
Cisco Cisco Firepower Management Center 7.0.6.3
Cisco Cisco Firepower Management Center 7.4.2.1
Cisco Cisco Firepower Management Center 7.2.9
Cisco Cisco Firepower Management Center 7.0.7
Cisco Cisco Firepower Management Center 7.4.2.2

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-JtNmcusP

{
    "lastseen": "",
    "description": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.",
    "published": "2025-08-14T16:28:58.528Z",
    "modified": "2025-08-14T19:20:36.520Z",
    "type": "cve",
    "title": "Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-JtNmcusP",
    "id": "CVE-2025-20235",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Firepower Management Center 6.2.3.12\nCisco Cisco Firepower Management Center 6.2.3.1\nCisco Cisco Firepower Management Center 6.2.3.10\nCisco Cisco Firepower Management Center 6.2.3.8\nCisco Cisco Firepower Management Center 6.4.0.6\nCisco Cisco Firepower Management Center 6.2.3\nCisco Cisco Firepower Management Center 6.4.0.7\nCisco Cisco Firepower Management Center 6.2.3.13\nCisco Cisco Firepower Management Center 6.2.3.5\nCisco Cisco Firepower Management Center 6.4.0.4\nCisco Cisco Firepower Management Center 6.2.3.9\nCisco Cisco Firepower Management Center 6.2.3.14\nCisco Cisco Firepower Management Center 6.4.0.1\nCisco Cisco Firepower Management Center 6.2.3.6\nCisco Cisco Firepower Management Center 6.2.3.11\nCisco Cisco Firepower Management Center 6.4.0.8\nCisco Cisco Firepower Management Center 6.2.3.2\nCisco Cisco Firepower Management Center 6.4.0.2\nCisco Cisco Firepower Management Center 6.2.3.3\nCisco Cisco Firepower Management Center 6.4.0.3\nCisco Cisco Firepower Management Center 6.2.3.7\nCisco Cisco Firepower Management Center 6.2.3.4\nCisco Cisco Firepower Management Center 6.4.0.5\nCisco Cisco Firepower Management Center 6.4.0\nCisco Cisco Firepower Management Center 6.2.3.15\nCisco Cisco Firepower Management Center 6.6.0\nCisco Cisco Firepower Management Center 6.4.0.9\nCisco Cisco Firepower Management Center 6.2.3.16\nCisco Cisco Firepower Management Center 6.6.0.1\nCisco Cisco Firepower Management Center 6.6.1\nCisco Cisco Firepower Management Center 6.4.0.10\nCisco Cisco Firepower Management Center 6.4.0.11\nCisco Cisco Firepower Management Center 6.6.3\nCisco Cisco Firepower Management Center 6.6.4\nCisco Cisco Firepower Management Center 6.4.0.12\nCisco Cisco Firepower Management Center 7.0.0\nCisco Cisco Firepower Management Center 6.2.3.17\nCisco Cisco Firepower Management Center 7.0.0.1\nCisco Cisco Firepower Management Center 6.6.5\nCisco Cisco Firepower Management Center 7.0.1\nCisco Cisco Firepower Management Center 7.1.0\nCisco Cisco Firepower Management Center 6.6.5.1\nCisco Cisco Firepower Management Center 6.4.0.13\nCisco Cisco Firepower Management Center 7.0.1.1\nCisco Cisco Firepower Management Center 6.2.3.18\nCisco Cisco Firepower Management Center 6.4.0.14\nCisco Cisco Firepower Management Center 6.6.5.2\nCisco Cisco Firepower Management Center 7.1.0.1\nCisco Cisco Firepower Management Center 7.0.2\nCisco Cisco Firepower Management Center 6.4.0.15\nCisco Cisco Firepower Management Center 7.2.0\nCisco Cisco Firepower Management Center 7.0.2.1\nCisco Cisco Firepower Management Center 7.0.3\nCisco Cisco Firepower Management Center 6.6.7\nCisco Cisco Firepower Management Center 7.1.0.2\nCisco Cisco Firepower Management Center 7.2.0.1\nCisco Cisco Firepower Management Center 7.0.4\nCisco Cisco Firepower Management Center 7.2.1\nCisco Cisco Firepower Management Center 7.0.5\nCisco Cisco Firepower Management Center 6.4.0.16\nCisco Cisco Firepower Management Center 7.3.0\nCisco Cisco Firepower Management Center 7.2.2\nCisco Cisco Firepower Management Center 6.6.7.1\nCisco Cisco Firepower Management Center 7.3.1\nCisco Cisco Firepower Management Center 7.2.3\nCisco Cisco Firepower Management Center 7.1.0.3\nCisco Cisco Firepower Management Center 7.2.3.1\nCisco Cisco Firepower Management Center 7.2.4\nCisco Cisco Firepower Management Center 7.0.6\nCisco Cisco Firepower Management Center 7.2.4.1\nCisco Cisco Firepower Management Center 7.2.5\nCisco Cisco Firepower Management Center 7.3.1.1\nCisco Cisco Firepower Management Center 7.4.0\nCisco Cisco Firepower Management Center 6.4.0.17\nCisco Cisco Firepower Management Center 7.0.6.1\nCisco Cisco Firepower Management Center 7.2.5.1\nCisco Cisco Firepower Management Center 7.4.1\nCisco Cisco Firepower Management Center 7.2.6\nCisco Cisco Firepower Management Center 7.4.1.1\nCisco Cisco Firepower Management Center 7.0.6.2\nCisco Cisco Firepower Management Center 6.4.0.18\nCisco Cisco Firepower Management Center 6.6.7.2\nCisco Cisco Firepower Management Center 7.2.7\nCisco Cisco Firepower Management Center 7.2.5.2\nCisco Cisco Firepower Management Center 7.3.1.2\nCisco Cisco Firepower Management Center 7.2.8\nCisco Cisco Firepower Management Center 7.6.0\nCisco Cisco Firepower Management Center 7.4.2\nCisco Cisco Firepower Management Center 7.2.8.1\nCisco Cisco Firepower Management Center 7.0.6.3\nCisco Cisco Firepower Management Center 7.4.2.1\nCisco Cisco Firepower Management Center 7.2.9\nCisco Cisco Firepower Management Center 7.0.7\nCisco Cisco Firepower Management Center 7.4.2.2",
    "sourceHref": "",
    "cvss": {
        "score": 6.1,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Firepower Management Center",
    "version": "6.2.3.12",
    "vendor": "Cisco",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability_CVE-2025-20235

Description

Basic Information

Affected Product

References

💭 Join the Security Discussion ❌ Cancel Reply