AS
Product
Adaptive Security Appliance Software
On CISA KEVExploited in the wildRansomware-linked
354
CVEs
14
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 106Medium 87Low 1
Watch
Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1706 | 8.6 | May 3 | A vulnerability in the software cryptography module of the Cisco Adaptive Security Virtual Appliance (ASAv) and Firepower 2100 Series running Cisco Adaptive Security Appliance… Affected: 9.9 through 9.9.2.50 |
| CVE-2019-1694 | 8.6 | May 3 | A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.4.4.34 |
| CVE-2018-15388 | 8.6 | May 3 | A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.4.4.34 |
| CVE-2018-15454 | 8.6 | Nov 1 | A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.4 before 9.4.4.27; 9.6 before 9.6.4.18; 9.8 before 9.8.3.16; 9.9 before 9.9.2.32; 9.10 before 9.10.1.2 |
| CVE-2018-0240 | 8.6 | Apr 19 | Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.6.0.0 before 9.6.4.6; 9.7.0.0 before 9.7.1.24; 9.8.0.0 before 9.8.2.24; 9.9.0.0 before 9.9.1.4 |
| CVE-2018-0231 | 8.6 | Apr 19 | A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8(1); 98.1(1.154) |
| CVE-2018-0230 | 8.6 | Apr 19 | A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Security Appliances could allow an… Affected: 9.8(2) |
| CVE-2018-0228 | 8.6 | Apr 19 | A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the CPU to increase… Affected: 9.1 before 9.1.7.20; 9.3 before 9.4.4.13; 9.5 before 9.6.3.17; 9.7 before 9.7.1.16; 9.8 before 9.8.2.14 |
| CVE-2017-12246 | 8.6 | Oct 5 | A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to… Affected: 9.4(3); 9.7(1); 9.8(0.56) |
| CVE-2017-6608 | 8.6 | Apr 20 | A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more |
| CVE-2018-15465 | 8.1 | Dec 24 | A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker… Affected: before 9.4.4.29 |
| CVE-2012-5010 | 8.1 | Jun 27 | ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim, ASA 5510 Adaptive Security Appliance… Affected: through 8.2\(4\) |
| CVE-2016-6432 | 8.1 | Oct 27 | A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or… Affected: 8.4.0; 8.4.2; 8.4.2.1; 8.4.2.8; 8.4.3; 8.4.3.8; +34 more |
| CVE-2020-3167 | 7.8 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying… Affected: 9.8 before 9.9.2.66; 9.10 before 9.12.3.6; 9.13 before 9.13.1.5 |
| CVE-2019-1945 | 7.8 | Aug 7 | Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the… Affected: before 9.4.4.37 |
| CVE-2026-20105 | 7.7 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2026-20100 | 7.7 | Mar 4 | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2026-20049 | 7.7 | Mar 4 | A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance… Affected: 9.18.1 before 9.18.4.66; 9.19.1 before 9.20.3.20; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.3 |
| CVE-2026-20014 | 7.7 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.9; 9.23.1 before 9.23.1.13 |
| CVE-2025-20127 | 7.7 | Aug 14 | A vulnerability in the TLS 1.3 implementation for a specific cipher for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense… Affected: 9.20.1; 9.20.1.5; 9.20.2; 9.20.2.10; 9.20.2.21; 9.20.2.22; +4 more |
| CVE-2024-20408 | 7.7 | Oct 23 | A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20268 | 7.7 | Oct 23 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.14.1; 9.14.1.6; 9.14.1.10; 9.14.1.15; 9.14.1.19; 9.14.1.30; +34 more |
| CVE-2021-1422 | 7.7 | Jul 16 | A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.16.1 |
| CVE-2017-6610 | 7.7 | Apr 20 | A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more |
| CVE-2017-6609 | 7.7 | Apr 20 | A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more |
| CVE-2023-20006 | 7.5 | Jun 28 | A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for… Affected: 9.16.4; 9.18.2; 9.18.2.5 |
| CVE-2022-20947 | 7.5 | Nov 15 | A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an… Affected: 9.6.1; 9.6.1.3; 9.6.1.5; 9.6.1.10; 9.6.2; 9.6.2.1; +34 more |
| CVE-2022-20866 | 7.5 | Aug 10 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability Affected: 9.16.0 before 9.16.3.19; 9.17.0 before 9.17.1.13; 9.18.0 before 9.18.2 |
| CVE-2022-20760 | 7.5 | May 3 | A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |
| CVE-2022-20745 | 7.5 | May 3 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |
| CVE-2022-20795 | 7.5 | Apr 21 | A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.17.0 through 9.17.1.9 |
| CVE-2021-34704 | 7.5 | Jan 11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.15 before 9.15.1.17; 9.16 before 9.16.2 |
| CVE-2021-1573 | 7.5 | Jan 11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8 before 9.8.4.40; 9.9 before 9.12.4.26; 9.13 before 9.14.3; 9.15 before 9.15.1.17; 9.16 before 9.16.1.28 |
| CVE-2021-40118 | 7.5 | Oct 27 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.9.0 before 9.12.4.29; 9.13.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2.3 |
| CVE-2021-40117 | 7.5 | Oct 27 | A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.9.0 before 9.12.4.26; 9.13.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2.3 |
| CVE-2021-34792 | 7.5 | Oct 27 | A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.8.0 before 9.8.4.40; 9.12.0 before 9.12.4.29; 9.14.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2.3 |
| CVE-2021-34783 | 7.5 | Oct 27 | A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.40; 9.12.0 before 9.12.4.29; 9.14.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2 |
| CVE-2021-1504 | 7.5 | Apr 29 | Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a… Affected: 9.7 before 9.8.4.35; 9.9 before 9.9.2.85; 9.10 before 9.12.4.10; 9.13 before 9.13.1.21; 9.14 before 9.14.2.4; 9.15 before 9.15.1.7 |
| CVE-2021-1501 | 7.5 | Apr 29 | A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8 before 9.8.4.34; 9.9 before 9.9.2.85; 9.10 before 9.12.4.18; 9.13 before 9.13.1.21; 9.14 before 9.14.2.13; 9.15 before 9.15.1.15 |
| CVE-2021-1445 | 7.5 | Apr 29 | Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a… Affected: 9.7 before 9.8.4.34; 9.9 before 9.9.2.85; 9.10 before 9.12.4.13; 9.13 before 9.13.1.21; 9.14 before 9.14.2.8; 9.15 before 9.15.1.7 |
| CVE-2020-3555 | 7.5 | Oct 21 | A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.7.0 before 9.8.4.24; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.43; 9.12.0 before 9.12.4.2; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.19 |
| CVE-2020-3554 | 7.5 | Oct 21 | A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.30 |
| CVE-2020-3529 | 7.5 | Oct 21 | A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.29; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.30 |
| CVE-2020-3528 | 7.5 | Oct 21 | A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.26; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.19 |
| CVE-2020-3306 | 7.5 | May 6 | A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.7 before 9.8.4.10; 9.9 before 9.10.1.30; 9.12 before 9.12.3 |
| CVE-2020-3305 | 7.5 | May 6 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)… Affected: 9.7 before 9.8.4.10; 9.9 before 9.10.1.30; 9.12 before 9.12.2.9 |
| CVE-2020-3303 | 7.5 | May 6 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.7 before 9.8.4.10; 9.9 before 9.10.1.30; 9.12 before 9.12.2.9 |
| CVE-2020-3298 | 7.5 | May 6 | A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.6.0 through 9.6.4.40; 9.8.0 through 9.8.4.17; 9.9.0 through 9.9.2.66; 9.10.0 through 9.10.1.37; 9.12.0 through 9.12.3.7; 9.13.0 through 9.13.1.7 |
| CVE-2020-3254 | 7.5 | May 6 | Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD)… Affected: 9.6 before 9.6.4.34; 9.8 before 9.8.4.7; 9.9 before 9.9.2.66; 9.10 before 9.10.1.27; 9.12 before 9.12.2.1 |
| CVE-2020-3195 | 7.5 | May 6 | A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.12 before 9.12.3.2; 9.13 before 9.13.1.7 |