AS
Product
Adaptive Security Appliance Software
On CISA KEVExploited in the wildRansomware-linked
354
CVEs
14
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 106Medium 87Low 1
Watch
Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20333 In wildKEV | 9.9 | Sep 25 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Affected: 9.12 before 9.12.4.72; 9.14 before 9.14.4.28; 9.16 before 9.16.4.85; 9.17.0 before 9.17.1.45; 9.18 before 9.18.4.47; 9.19 before 9.19.1.37; +2 more |
| CVE-2023-20269 RansomwareIn wildKEV | 9.1 | Sep 6 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2016-6366 In wildKEV | 8.8 | Aug 18 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Affected: 7.2.1 before 9.0.4.40; 9.1.1 before 9.1.7\(9\); 9.2.0 before 9.2.4\(14\); 9.3.0 before 9.3.3\(10\); 9.4.0.115 before 9.4.3\(8\); 9.5.0 through 9.5\(3\); +1 more |
| CVE-2026-20349 In wildKEV | 8.6 | Aug 11 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2025-20362 In wildKEV | 8.6 | Sep 25 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Affected: 9.12 before 9.12.4.72; 9.14 before 9.14.4.28; 9.16 before 9.16.4.85; 9.17.0 before 9.18.4.67; 9.19 before 9.20.4.10; 9.22 before 9.22.2.14; +1 more |
| CVE-2024-20353 In wildKEV | 8.6 | Apr 24 | Cisco ASA and FTD Denial of Service Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2016-6367 In wildKEV | 7.8 | Aug 18 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Affected: 7.2.0 before 8.4\(3\); 8.5 before 9.0\(1\) |
| CVE-2020-3452 In wildKEV | 7.5 | Jul 22 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability Affected: 9.6 before 9.6.4.42; 9.8 before 9.8.4.20; 9.9 before 9.9.2.74; 9.10 before 9.10.1.42; 9.12 before 9.12.3.12; 9.13 before 9.13.1.10; +1 more |
| CVE-2020-3259 RansomwareIn wildKEV | 7.5 | May 6 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability Affected: 9.8 before 9.8.4.20; 9.9 before 9.9.2.67; 9.10 before 9.10.1.40; 9.12 before 9.12.3.9; 9.13 before 9.13.1.10 |
| CVE-2018-0296 In wildKEV | 7.5 | Jun 7 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Affected: 9.1 before 9.1.7.29; 9.2 before 9.2.4.33; 9.3 before 9.4.4.18; 9.5 before 9.6.4.8; 9.7 before 9.7.1.24; 9.8 before 9.8.2.28; +1 more |
| CVE-2020-3580 RansomwareIn wildKEV | 6.1 | Oct 21 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities Affected: before 9.8.4.34; 9.9 before 9.9.2.85; 9.10 before 9.12.4.13; 9.13 before 9.13.1.21; 9.14 before 9.14.2.8; 9.15 before 9.15.1.15 |
| CVE-2014-2120 In wildKEV | 6.1 | Mar 19 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Affected: 0 |
| CVE-2024-20359 In wildKEV | 6.0 | Apr 24 | Cisco ASA and FTD Privilege Escalation Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20481 In wildKEV | 5.8 | Oct 23 | Cisco ASA and FTD Denial-of-Service Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2018-0101 | 10.0 | Jan 29 | A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to… Affected: before 9.1.7.23 |
| CVE-2024-20329 | 9.9 | Oct 23 | A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.17.1.11; 9.17.1.13; +21 more |
| CVE-2020-3125 | 9.8 | May 6 | A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the… Affected: 9.8 before 9.8.4.15; 9.9 before 9.9.2.66; 9.10 before 9.10.1.37; 9.12 before 9.12.3.2; 9.13 before 9.13.1.7 |
| CVE-2016-1287 | 9.8 | Feb 11 | Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5),… Affected: 7.2.1; 7.2.1.9; 7.2.1.13; 7.2.1.19; 7.2.1.24; 7.2.2; +34 more |
| CVE-2020-3187 | 9.1 | May 6 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.6 before 9.6.4.40; 9.8 before 9.8.4.15; 9.9 before 9.9.2.66; 9.10 before 9.10.1.37; 9.12 before 9.12.3.2; 9.13 before 9.13.1.7 |
| CVE-2025-20363 | 9.0 | Sep 25 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,… Affected: 9.12 before 9.12.4.72; 9.14 before 9.14.4.28; 9.16 before 9.16.4.84; 9.17.1 before 9.18.4.57; 9.19.1 before 9.19.1.42; 9.20.1 before 9.20.3.16; +2 more |
| CVE-2022-20759 | 8.8 | May 3 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |
| CVE-2019-1934 | 8.8 | Aug 7 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to elevate privileges and… Affected: through 8.2 |
| CVE-2019-1713 | 8.8 | May 3 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: before 9.4.4.34 |
| CVE-2017-3807 | 8.8 | Feb 9 | A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-9.6, could allow an authenticated,… Affected: 7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; +34 more |
| CVE-2017-6607 | 8.7 | Apr 20 | A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload or corrupt the information present in… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more |
| CVE-2026-20012 | 8.6 | Mar 25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2026-20103 | 8.6 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2026-20101 | 8.6 | Mar 4 | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2026-20082 | 8.6 | Mar 4 | A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote… Affected: 9.20.4.14 before 9.20.4.19 |
| CVE-2026-20039 | 8.6 | Mar 4 | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1 before 9.16.4.84; 9.17.1 before 9.18.4.57; 9.19.1 before 9.20.3.16; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.3 |
| CVE-2025-20182 | 8.6 | May 7 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD)… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2020-27124 | 8.6 | Nov 18 | A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause the affected device to… Affected: 9.13.1.12; 9.13.1.13; 9.14.1.10 |
| CVE-2024-20495 | 8.6 | Oct 23 | A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.4.12; 9.8.4.15; 9.8.4.17; 9.8.4.20; 9.8.4.22; 9.8.4.25; +34 more |
| CVE-2024-20494 | 8.6 | Oct 23 | A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.19.1; 9.19.1.5; 9.19.1.9; 9.19.1.12; 9.19.1.18; 9.19.1.22; +11 more |
| CVE-2024-20426 | 8.6 | Oct 23 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +27 more |
| CVE-2024-20402 | 8.6 | Oct 23 | A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2023-20095 | 8.6 | Nov 1 | A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2023-20042 | 8.6 | Nov 1 | A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +24 more |
| CVE-2023-20086 | 8.6 | Nov 1 | A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2022-20715 | 8.6 | May 3 | A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.8.4.44; 9.9 before 9.12.4.38; 9.13 before 9.14.4; 9.15 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |
| CVE-2021-34793 | 8.6 | Oct 27 | A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an… Affected: 9.9.0 before 9.12.4.29; 9.13.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2.3 |
| CVE-2020-3572 | 8.6 | Oct 21 | A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.26; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.19 |
| CVE-2020-3436 | 8.6 | Oct 21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.8.0 before 9.8.4.25; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.2; 9.13.0 before 9.13.1.12; 9.14.0 before 9.14.1.15 |
| CVE-2020-3373 | 8.6 | Oct 21 | A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.4.22; 9.8.4.25; 9.12.4.2; 9.12.4.3; 9.13.1.12; 9.14.1.15 |
| CVE-2020-3304 | 8.6 | Oct 21 | A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.8.0 before 9.8.4.22; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.3.12; 9.13.0 before 9.13.1.12; 9.14.0 before 9.14.1.10 |
| CVE-2020-3196 | 8.6 | May 6 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 9.6 before 9.6.4.40; 9.8 before 9.8.4.20; 9.9 before 9.9.2.66; 9.10 before 9.10.1.37; 9.12 before 9.12.3.2; 9.13 before 9.13.1.7 |
| CVE-2020-3191 | 8.6 | May 6 | A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.6 before 9.6.4.36; 9.8 before 9.8.4.12; 9.9 before 9.9.2.66; 9.10 before 9.10.1.37; 9.12 before 9.12.2.9 |
| CVE-2019-15256 | 8.6 | Oct 2 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.7 before 9.8.4.10 |
| CVE-2019-1714 | 8.6 | May 3 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in… Affected: 9.7 before 9.8.4; 9.9 before 9.9.2.50; 9.10 before 9.10.1.17 |
| CVE-2019-1708 | 8.6 | May 3 | A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco… Affected: 9.8 through 9.8.4; 9.9 through 9.9.2.50; 9.10 through 9.10.1.17 |