Adaptive Security Appliance Software vulnerabilities

Product

Adaptive Security Appliance Software

by Cisco · last CVE Aug 11, 2026

On CISA KEVExploited in the wildRansomware-linked

354

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities354 In the news8 Timeline

Severity mix

Critical 8High 106Medium 87Low 1

Severity

All severities354 Critical8 High106 Medium87 Low1

Exploitation

On CISA KEV14 Exploited in the wild14

Watch

Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-6366 In wildKEV	8.8	88%	Aug 18	Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Affected: 7.2.1 before 9.0.4.40; 9.1.1 before 9.1.7\(9\); 9.2.0 before 9.2.4\(14\); 9.3.0 before 9.3.3\(10\); 9.4.0.115 before 9.4.3\(8\); 9.5.0 through 9.5\(3\); +1 more
CVE-2026-20349 In wildKEV	8.6	1%	Aug 11	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2025-20362 In wildKEV	8.6	87%	Sep 25	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Affected: 9.12 before 9.12.4.72; 9.14 before 9.14.4.28; 9.16 before 9.16.4.85; 9.17.0 before 9.18.4.67; 9.19 before 9.20.4.10; 9.22 before 9.22.2.14; +1 more
CVE-2024-20353 In wildKEV	8.6	70%	Apr 24	Cisco ASA and FTD Denial of Service Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2016-6367 In wildKEV	7.8	23%	Aug 18	Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Affected: 7.2.0 before 8.4\(3\); 8.5 before 9.0\(1\)
CVE-2020-3452 In wildKEV	7.5	100%	Jul 22	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability Affected: 9.6 before 9.6.4.42; 9.8 before 9.8.4.20; 9.9 before 9.9.2.74; 9.10 before 9.10.1.42; 9.12 before 9.12.3.12; 9.13 before 9.13.1.10; +1 more
CVE-2020-3259 RansomwareIn wildKEV	7.5	72%	May 6	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability Affected: 9.8 before 9.8.4.20; 9.9 before 9.9.2.67; 9.10 before 9.10.1.40; 9.12 before 9.12.3.9; 9.13 before 9.13.1.10
CVE-2018-0296 In wildKEV	7.5	100%	Jun 7	Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Affected: 9.1 before 9.1.7.29; 9.2 before 9.2.4.33; 9.3 before 9.4.4.18; 9.5 before 9.6.4.8; 9.7 before 9.7.1.24; 9.8 before 9.8.2.28; +1 more
CVE-2022-20759	8.8	29%	May 3	A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7
CVE-2019-1934	8.8	2%	Aug 7	A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to elevate privileges and… Affected: through 8.2
CVE-2019-1713	8.8	1%	May 3	A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: before 9.4.4.34
CVE-2017-3807	8.8	15%	Feb 9	A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-9.6, could allow an authenticated,… Affected: 7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; +34 more
CVE-2017-6607	8.7	2%	Apr 20	A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload or corrupt the information present in… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more
CVE-2026-20012	8.6	0%	Mar 25	A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2026-20082	8.6	0%	Mar 4	A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote… Affected: 9.20.4.14 before 9.20.4.19
CVE-2026-20103	8.6	0%	Mar 4	A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7
CVE-2026-20101	8.6	0%	Mar 4	A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7
CVE-2026-20039	8.6	0%	Mar 4	Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability Affected: 9.12.1 before 9.16.4.84; 9.17.1 before 9.18.4.57; 9.19.1 before 9.20.3.16; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.3
CVE-2025-20182	8.6	1%	May 7	A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD)… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2020-27124	8.6	1%	Nov 18	A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause the affected device to… Affected: 9.13.1.12; 9.13.1.13; 9.14.1.10
CVE-2024-20495	8.6	1%	Oct 23	A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.4.12; 9.8.4.15; 9.8.4.17; 9.8.4.20; 9.8.4.22; 9.8.4.25; +34 more
CVE-2024-20494	8.6	1%	Oct 23	A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.19.1; 9.19.1.5; 9.19.1.9; 9.19.1.12; 9.19.1.18; 9.19.1.22; +11 more
CVE-2024-20426	8.6	1%	Oct 23	A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +27 more
CVE-2024-20402	8.6	1%	Oct 23	A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2023-20095	8.6	1%	Nov 1	A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2023-20042	8.6	1%	Nov 1	A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +24 more
CVE-2023-20086	8.6	1%	Nov 1	A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2022-20715	8.6	1%	May 3	A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.8.4.44; 9.9 before 9.12.4.38; 9.13 before 9.14.4; 9.15 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7
CVE-2021-34793	8.6	1%	Oct 27	A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an… Affected: 9.9.0 before 9.12.4.29; 9.13.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2.3
CVE-2020-3572	8.6	2%	Oct 21	A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.26; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.19
CVE-2020-3436	8.6	2%	Oct 21	A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.8.0 before 9.8.4.25; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.2; 9.13.0 before 9.13.1.12; 9.14.0 before 9.14.1.15
CVE-2020-3373	8.6	2%	Oct 21	A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.4.22; 9.8.4.25; 9.12.4.2; 9.12.4.3; 9.13.1.12; 9.14.1.15
CVE-2020-3304	8.6	4%	Oct 21	A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.8.0 before 9.8.4.22; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.3.12; 9.13.0 before 9.13.1.12; 9.14.0 before 9.14.1.10
CVE-2020-3196	8.6	2%	May 6	A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 9.6 before 9.6.4.40; 9.8 before 9.8.4.20; 9.9 before 9.9.2.66; 9.10 before 9.10.1.37; 9.12 before 9.12.3.2; 9.13 before 9.13.1.7
CVE-2020-3191	8.6	2%	May 6	A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.6 before 9.6.4.36; 9.8 before 9.8.4.12; 9.9 before 9.9.2.66; 9.10 before 9.10.1.37; 9.12 before 9.12.2.9
CVE-2019-15256	8.6	2%	Oct 2	A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.7 before 9.8.4.10
CVE-2019-1714	8.6	2%	May 3	A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in… Affected: 9.7 before 9.8.4; 9.9 before 9.9.2.50; 9.10 before 9.10.1.17
CVE-2019-1708	8.6	2%	May 3	A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco… Affected: 9.8 through 9.8.4; 9.9 through 9.9.2.50; 9.10 through 9.10.1.17
CVE-2019-1706	8.6	1%	May 3	A vulnerability in the software cryptography module of the Cisco Adaptive Security Virtual Appliance (ASAv) and Firepower 2100 Series running Cisco Adaptive Security Appliance… Affected: 9.9 through 9.9.2.50
CVE-2019-1694	8.6	3%	May 3	A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.4.4.34
CVE-2018-15388	8.6	2%	May 3	A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.4.4.34
CVE-2018-15454	8.6	4%	Nov 1	A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.4 before 9.4.4.27; 9.6 before 9.6.4.18; 9.8 before 9.8.3.16; 9.9 before 9.9.2.32; 9.10 before 9.10.1.2
CVE-2018-0240	8.6	4%	Apr 19	Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.6.0.0 before 9.6.4.6; 9.7.0.0 before 9.7.1.24; 9.8.0.0 before 9.8.2.24; 9.9.0.0 before 9.9.1.4
CVE-2018-0231	8.6	4%	Apr 19	A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8(1); 98.1(1.154)
CVE-2018-0230	8.6	2%	Apr 19	A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Security Appliances could allow an… Affected: 9.8(2)
CVE-2018-0228	8.6	4%	Apr 19	A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the CPU to increase… Affected: 9.1 before 9.1.7.20; 9.3 before 9.4.4.13; 9.5 before 9.6.3.17; 9.7 before 9.7.1.16; 9.8 before 9.8.2.14
CVE-2017-12246	8.6	7%	Oct 5	A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to… Affected: 9.4(3); 9.7(1); 9.8(0.56)
CVE-2017-6608	8.6	5%	Apr 20	A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more
CVE-2018-15465	8.1	2%	Dec 24	A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker… Affected: before 9.4.4.29
CVE-2012-5010	8.1	1%	Jun 27	ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim, ASA 5510 Adaptive Security Appliance… Affected: through 8.2\(4\)