Cisco has released software updates that address these vulnerabilities. There are no workarounds or mitigations that can be applied to reduce the risk of exploitation. If you are running Cisco FMC Software version 11.2 or earlier, you should upgrade to version 11.3. Cisco FMC Software version 11.3 or later is not affected by these issues. Cisco recommends that you install the updated software version as soon as possible. In addition, Cisco FMC Software version 11.2 or earlier is not affected by another issue in which the input to the Cisco FMC Software email notification feature could be intentionally modified, allowing an attacker to send a forged email notification to an affected system administrator. Cisco FMC Software version 11.3 addresses this issue. Cisco FMC Software version 11.2 or earlier is not affected by another issue in which the input to the Cisco FMC Software web-based management interface could be unintentionally modified, allowing an attacker to conduct a cross-site scripting (XSS) attack against users of the interface. Cisco FMC Software version 11.3 addresses this issue. Cisco FMC Software version 11.2 or earlier is not affected by another issue in which the input to the Cisco FMC Software web-based management interface could be unintentionally modified, allowing an attacker to conduct a cross-site scripting (XSS) attack against users of the interface. Cisco FMC Software version 11.3 addresses this issue. In addition, Cisco FMC Software version 11.2 or

Software Assurance and Cisco FMC

If you are a customer who purchased Cisco FMC Software after June 10, 2016 and have Software Assurance, Cisco recommends that you install the updated software version as soon as possible.
Cisco has released software updates that address these vulnerabilities. There are no workarounds or mitigations that can be applied to reduce the risk of exploitation. If you are running Cisco FMC Software version 11.2 or earlier, you should upgrade to version 11.3. Cisco FMC Software version 11.3 or later is not affected by these issues. Cisco recommends that you install the updated software version as soon as possible. To find out more about Software Assurance and how to purchase this service for your product, visit www.cisco.com/go/sa-12-2-a

How to Find TAC Updates

TAC = Technical Assistance Center. The TAC is the place to go if your Cisco product doesn't perform as expected. They are always available to help you troubleshoot and fix any problems you are having with your products. In order to find the most recent software updates for your device, you need to go to the Cisco FMC Software download page on the Cisco website and select your device under "Platforms."

Timeline

Published on: 11/15/2022 21:15:00 UTC
Last modified on: 11/18/2022 18:14:00 UTC

References