This vulnerability arises from insufficient validation of user-supplied input in Cisco Secure FMC's web management interface. An attacker with a valid account assigned the Security Approver, Access Admin, or Network Admin role can send specially crafted HTTP requests to perform SQL injection attacks. Exploitation can result in disclosure of database contents, compromise of administrator session credentials, and execution of administrative actions on the device.

An attacker who successfully exploits this vulnerability can obtain sensitive data from the device's database, hijack administrator sessions, and gain administrative privileges, potentially leading to full control over the affected Cisco Secure FMC device. This poses a significant risk to the confidentiality, integrity, and availability of the firewall management system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the management interface to trusted administrators only and monitor for suspicious activity. Ensure that only necessary users have the Security Approver, Access Admin, or Network Admin roles to reduce exposure.