CVE-2023-20206

Summary

CVE-2023-20206 refers to multiple cross-site scripting (XSS) vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software. An unauthenticated, remote attacker can exploit these vulnerabilities by inserting malicious code into various data fields of the interface. Successful exploitation could result in the execution of arbitrary script code in the context of the interface, or the access of sensitive browser-based information. In some instances, it may also lead to temporary availability impacts on portions of the FMC Dashboard. These vulnerabilities arise due to insufficient validation of user-supplied input by the web-based management interface.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.