CVE-2026-20002

HIGH8.1Injection

Description

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain full access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected products

Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0 – 6.4.0
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.1 – 6.4.0.1
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.3 – 6.4.0.3
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.2 – 6.4.0.2
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.4 – 6.4.0.4
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.5 – 6.4.0.5
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.6 – 6.4.0.6
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.7 – 6.4.0.7
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.8 – 6.4.0.8
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.9 – 6.4.0.9
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.10 – 6.4.0.10
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.11 – 6.4.0.11
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.12 – 6.4.0.12
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.13 – 6.4.0.13
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.14 – 6.4.0.14
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.15 – 6.4.0.15
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.16 – 6.4.0.16
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.17 – 6.4.0.17
Cisco / Cisco Secure Firewall Management Center (FMC)6.4.0.18 – 6.4.0.18
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.0 – 7.0.0
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.0.1 – 7.0.0.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.1 – 7.0.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.1.1 – 7.0.1.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.2 – 7.0.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.2.1 – 7.0.2.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.3 – 7.0.3
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.4 – 7.0.4
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.5 – 7.0.5
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.6 – 7.0.6
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.6.1 – 7.0.6.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.6.2 – 7.0.6.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.6.3 – 7.0.6.3
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.7 – 7.0.7
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.8 – 7.0.8
Cisco / Cisco Secure Firewall Management Center (FMC)7.0.8.1 – 7.0.8.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.1.0 – 7.1.0
Cisco / Cisco Secure Firewall Management Center (FMC)7.1.0.1 – 7.1.0.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.1.0.2 – 7.1.0.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.1.0.3 – 7.1.0.3
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.0 – 7.2.0
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.1 – 7.2.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.2 – 7.2.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.0.1 – 7.2.0.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.3 – 7.2.3
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.3.1 – 7.2.3.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.4 – 7.2.4
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.4.1 – 7.2.4.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.5 – 7.2.5
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.5.1 – 7.2.5.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.6 – 7.2.6
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.7 – 7.2.7
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.5.2 – 7.2.5.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.8 – 7.2.8
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.8.1 – 7.2.8.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.9 – 7.2.9
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.10 – 7.2.10
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.10.2 – 7.2.10.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.2.10.1 – 7.2.10.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.3.0 – 7.3.0
Cisco / Cisco Secure Firewall Management Center (FMC)7.3.1 – 7.3.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.3.1.1 – 7.3.1.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.3.1.2 – 7.3.1.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.0 – 7.4.0
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.1 – 7.4.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.1.1 – 7.4.1.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.2 – 7.4.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.2.1 – 7.4.2.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.2.2 – 7.4.2.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.2.3 – 7.4.2.3
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.2.4 – 7.4.2.4
Cisco / Cisco Secure Firewall Management Center (FMC)7.4.3 – 7.4.3
Cisco / Cisco Secure Firewall Management Center (FMC)7.6.0 – 7.6.0
Cisco / Cisco Secure Firewall Management Center (FMC)7.6.1 – 7.6.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.6.2 – 7.6.2
Cisco / Cisco Secure Firewall Management Center (FMC)7.6.2.1 – 7.6.2.1
Cisco / Cisco Secure Firewall Management Center (FMC)7.6.3 – 7.6.3
Cisco / Cisco Secure Firewall Management Center (FMC)7.7.0 – 7.7.0
Cisco / Cisco Secure Firewall Management Center (FMC)7.7.10 – 7.7.10
Cisco / Cisco Secure Firewall Management Center (FMC)7.7.10.1 – 7.7.10.1
Cisco / secure_firewall_management_center6.4.0 – 6.4.0.18

References

VENDOR_ADVISORYhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd

Updated 20m ago · 8 sources