CVE-2021-34763— Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-34763
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this advisory.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Firepower Management Center 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center Software 存在安全漏洞，该漏洞源于基于 Web 的管理界面对用户提供的输入的验证不足。攻击者可以通过说服界面用户单击精心制作的链接来利用此漏洞。成功的利用可能允许攻击者在界面上下文中执行任意脚本代码或访问敏感的、基于浏览器的信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Management Center | n/a | - |
II. Public POCs for CVE-2021-34763
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-34763
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-openredir-TVPMWJygvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2021-34763
Same Patch Batch · Cisco · 2021-10-27 · 20 CVEs total
| CVE-2021-40117 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS D |
| CVE-2021-40116 | 8.6 HIGH | Multiple Cisco Products Snort Rule Denial of Service Vulnerability |
| CVE-2021-40118 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2021-34793 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transpare |
| CVE-2021-34792 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource |
| CVE-2021-34783 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software- |
| CVE-2021-34781 | 8.6 HIGH | Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability |
| CVE-2021-34762 | 8.1 HIGH | Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability |
| CVE-2021-40114 | 6.8 MEDIUM | Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability |
| CVE-2021-34755 | 6.7 MEDIUM | Cisco Firepower Threat Defense Software Command Injection Vulnerabilities |
| CVE-2021-34756 | 6.7 MEDIUM | Cisco Firepower Threat Defense Software Command Injection Vulnerabilities |
| CVE-2021-34754 | 5.8 MEDIUM | Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnera |
| CVE-2021-40125 | 5.3 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Sit |
| CVE-2021-34787 | 5.3 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity- |
| CVE-2021-34794 | 5.3 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Acce |
| CVE-2021-34764 | 4.8 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerab |
| CVE-2021-34790 | 4.7 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Applicati |
| CVE-2021-34791 | 4.7 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Applicati |
| CVE-2021-34761 | 4.4 MEDIUM | Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Firepower Management Center
- CVE-2025-20220
Cisco Secure Firewall Management Center和Cisco Secure Firewal - CVE-2025-20306
Cisco Secure Firewall Management Center Software Command Inj - CVE-2025-20302
Cisco Secure Firewall Management Center Software Authorizati - CVE-2025-20301
Cisco Secure Firewall Management Center Software Authorizati - CVE-2025-20265
Cisco Secure Firewall Management Center Software Radius Remo
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-601
- CVE-2026-42350
Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Qu - CVE-2026-42195
Unvalidated gitlab URL parameter redirects OAuth authorize s - CVE-2026-3318
Multiple vulnerabilities in Cradle e-commerce - CVE-2026-42259
Saltcorn: Open Redirect in `POST /auth/login` due to incompl - CVE-2026-6795
Open Redirect in DivvyDrive Information Technologies' DivvyD
V. Comments for CVE-2021-34763
No comments yet