CVE-2021-34764
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more details, see the Details section of the Cisco advisory.
Risk Assessment
The risk includes potential execution of malicious scripts in an administrator's browser or redirecting users to malicious sites, which could lead to data theft or session hijacking.
Recommendation
Apply the latest software updates from Cisco that address these vulnerabilities and restrict access to the management interface.
Original NVD description (English source)
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this advisory.