CVE-2021-34763
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an attacker to perform a cross-site scripting (XSS) attack or an open redirect attack.
Risk Assessment
XSS attacks could lead to admin session theft or malicious code execution in the browser, while open redirects could be used for phishing.
Recommendation
Apply Cisco updates for FMC and restrict access to the management interface to trusted users only.
Original NVD description (English source)
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this advisory.