CVE-2025-20218: Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability

Published Aug 14, 2025

Updated

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to retrieve sensitive information from the affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.

Affected Software

88 affected components

Cisco Secure Firewall Management Center

Cisco Secure Firewall Management Center=6.2.3

Cisco Secure Firewall Management Center=6.2.3.1

Cisco Secure Firewall Management Center=6.2.3.2

Cisco Secure Firewall Management Center=6.2.3.3

Cisco Secure Firewall Management Center=6.2.3.4

Cisco Secure Firewall Management Center=6.2.3.5

Cisco Secure Firewall Management Center=6.2.3.6

Cisco Secure Firewall Management Center=6.2.3.7

Cisco Secure Firewall Management Center=6.2.3.8

Cisco Secure Firewall Management Center=6.2.3.9

Cisco Secure Firewall Management Center=6.2.3.10

Cisco Secure Firewall Management Center=6.2.3.11

Cisco Secure Firewall Management Center=6.2.3.12

Cisco Secure Firewall Management Center=6.2.3.13

Cisco Secure Firewall Management Center=6.2.3.14

Cisco Secure Firewall Management Center=6.2.3.15

Cisco Secure Firewall Management Center=6.2.3.16

Cisco Secure Firewall Management Center=6.2.3.17

Cisco Secure Firewall Management Center=6.2.3.18

Cisco Secure Firewall Management Center=6.4.0

Cisco Secure Firewall Management Center=6.4.0.1

Cisco Secure Firewall Management Center=6.4.0.2

Cisco Secure Firewall Management Center=6.4.0.3

Cisco Secure Firewall Management Center=6.4.0.4

Cisco Secure Firewall Management Center=6.4.0.5

Cisco Secure Firewall Management Center=6.4.0.6

Cisco Secure Firewall Management Center=6.4.0.7

Cisco Secure Firewall Management Center=6.4.0.8

Cisco Secure Firewall Management Center=6.4.0.9

Cisco Secure Firewall Management Center=6.4.0.10

Cisco Secure Firewall Management Center=6.4.0.11

Cisco Secure Firewall Management Center=6.4.0.12

Cisco Secure Firewall Management Center=6.4.0.13

Cisco Secure Firewall Management Center=6.4.0.14

Cisco Secure Firewall Management Center=6.4.0.15

Cisco Secure Firewall Management Center=6.4.0.16

Cisco Secure Firewall Management Center=6.4.0.17

Cisco Secure Firewall Management Center=6.4.0.18

Cisco Secure Firewall Management Center=6.6.0

Cisco Secure Firewall Management Center=6.6.0.1

Cisco Secure Firewall Management Center=6.6.1

Cisco Secure Firewall Management Center=6.6.3

Cisco Secure Firewall Management Center=6.6.4

Cisco Secure Firewall Management Center=6.6.5

Cisco Secure Firewall Management Center=6.6.5.1

Cisco Secure Firewall Management Center=6.6.5.2

Cisco Secure Firewall Management Center=6.6.7

Cisco Secure Firewall Management Center=6.6.7.1

Cisco Secure Firewall Management Center=6.6.7.2

Cisco Secure Firewall Management Center=7.0.0

Cisco Secure Firewall Management Center=7.0.0.1

Cisco Secure Firewall Management Center=7.0.1

Cisco Secure Firewall Management Center=7.0.1.1

Cisco Secure Firewall Management Center=7.0.2

Cisco Secure Firewall Management Center=7.0.2.1

Cisco Secure Firewall Management Center=7.0.3

Cisco Secure Firewall Management Center=7.0.4

Cisco Secure Firewall Management Center=7.0.5

Cisco Secure Firewall Management Center=7.0.6

Cisco Secure Firewall Management Center=7.0.6.1

Cisco Secure Firewall Management Center=7.0.6.2

Cisco Secure Firewall Management Center=7.0.6.3

Cisco Secure Firewall Management Center=7.2.0

Cisco Secure Firewall Management Center=7.2.0.1

Cisco Secure Firewall Management Center=7.2.1

Cisco Secure Firewall Management Center=7.2.2

Cisco Secure Firewall Management Center=7.2.3

Cisco Secure Firewall Management Center=7.2.3.1

Cisco Secure Firewall Management Center=7.2.4

Cisco Secure Firewall Management Center=7.2.4.1

Cisco Secure Firewall Management Center=7.2.5

Cisco Secure Firewall Management Center=7.2.5.1

Cisco Secure Firewall Management Center=7.2.5.2

Cisco Secure Firewall Management Center=7.2.6

Cisco Secure Firewall Management Center=7.2.7

Cisco Secure Firewall Management Center=7.2.8

Cisco Secure Firewall Management Center=7.2.8.1

Cisco Secure Firewall Management Center=7.2.9

Cisco Secure Firewall Management Center=7.3.0

Cisco Secure Firewall Management Center=7.3.1

Cisco Secure Firewall Management Center=7.3.1.1

Cisco Secure Firewall Management Center=7.3.1.2

Cisco Secure Firewall Management Center=7.4.0

Cisco Secure Firewall Management Center=7.4.1

Cisco Secure Firewall Management Center=7.4.1.1

Cisco Secure Firewall Management Center=7.4.2

Cisco Secure Firewall Management Center=7.4.2.1

Event History

Aug 14, 2025

CVE Published

via MITRE·04:28 PM

Data Sourced

via MITRE·04:28 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-20218?

CVE-2025-20218 has a high severity rating due to its potential to allow sensitive information disclosure.

How do I fix CVE-2025-20218?

To remediate CVE-2025-20218, you should apply the latest security updates provided by Cisco for the Secure Firewall Management Center.

Who is affected by CVE-2025-20218?

CVE-2025-20218 affects users of the Cisco Secure Firewall Management Center software who utilize its web-based management interface.

What type of attack does CVE-2025-20218 facilitate?

CVE-2025-20218 facilitates an authenticated remote attack that can lead to the retrieval of sensitive information from the affected device.

What causes CVE-2025-20218?

CVE-2025-20218 is caused by insufficient input validation within the web-based management interface of Cisco Secure Firewall Management Center.