CVE-2025-20218
MEDIUMDescription
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to retrieve sensitive information from the affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.
Is your site exposed to CVE-2025-20218?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_management_center |
References
Frequently Asked Questions
What is CVE-2025-20218? +
How severe is CVE-2025-20218? +
What products are affected by CVE-2025-20218? +
How do I check if I'm vulnerable to CVE-2025-20218? +
Related Vulnerabilities
Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath …
An Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in J-Web shipped with Juniper Networks Junos OS allows …
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access …
Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs …
A vulnerability classified as problematic has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part …
A vulnerability, which was classified as problematic, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown …