CVE-2017-6716: A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated...

Security readout for executives and security teams

Cisco Firepower Management Center versions before 6.0.0.0 could let an authenticated remote user store malicious script in the web interface. That script could run later in another user's browser. The supplied sources do not provide CVSS scoring or confirmed exploitation evidence. Exposure is most likely where legacy Cisco FMC instances below 6.0.0.0 remain in use and their web interface is reachable by multiple authenticated users. Internet exposure is not stated in the sources and should not be assumed. Treat this as a legacy management-plane hygiene issue. It is not cited as actively exploited, but FMC is a security control console, so affected versions should be removed from production exposure during normal vulnerability remediation cycles. Mitigation focus: Upgrade affected FMC software to 6.0.0.0 or later per Cisco guidance.; Review Cisco advisory CSCuy88785 for vendor-specific remediation details.; Restrict FMC web interface access to trusted administrative networks and users..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.