Secure Firewall Management Center
CVE-2025-20302: Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 3.1 4.3
EPSS0.31%Chance of exploitation in 30 days
Public exploitNot tracked
FixNot yet
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.1 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.1 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.1 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.3 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.3 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.1 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.3 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.3 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.6 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain.
This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by directly accessing a generated report file for a different domain that is managed on the same Cisco Secure FMC instance. A successful exploit could allow the attacker to access a previously run report for a different domain, which could allow an attacker to read activity recorded in that domain.
Exploitation
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.