Cisco Firepower Management Center (FMC) Software contains a SQL injection vulnerability in its web-based management interface. An authenticated remote attacker can exploit this vulnerability to obtain database data, execute commands, and elevate privileges to root. The vulnerability arises from inadequate user input validation in the interface. Cisco has released software updates to address the issue, and there are no available workarounds. The advisory is part of the May 2024 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. The security impact rating is high, and the CVE is CVE-2024-20360. To exploit the vulnerability, an attacker would require Read Only user credentials.