AS
Product
Adaptive Security Appliance Software
On CISA KEVExploited in the wildRansomware-linked
354
CVEs
14
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 106Medium 87Low 1
Watch
Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6432 | 8.1 | Oct 27 | A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or… Affected: 8.4.0; 8.4.2; 8.4.2.1; 8.4.2.8; 8.4.3; 8.4.3.8; +34 more |
| CVE-2020-3167 | 7.8 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying… Affected: 9.8 before 9.9.2.66; 9.10 before 9.12.3.6; 9.13 before 9.13.1.5 |
| CVE-2019-1945 | 7.8 | Aug 7 | Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the… Affected: before 9.4.4.37 |
| CVE-2026-20049 | 7.7 | Mar 4 | A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance… Affected: 9.18.1 before 9.18.4.66; 9.19.1 before 9.20.3.20; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.3 |
| CVE-2026-20014 | 7.7 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.9; 9.23.1 before 9.23.1.13 |
| CVE-2026-20105 | 7.7 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2026-20100 | 7.7 | Mar 4 | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2025-20127 | 7.7 | Aug 14 | A vulnerability in the TLS 1.3 implementation for a specific cipher for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense… Affected: 9.20.1; 9.20.1.5; 9.20.2; 9.20.2.10; 9.20.2.21; 9.20.2.22; +4 more |
| CVE-2024-20408 | 7.7 | Oct 23 | A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20268 | 7.7 | Oct 23 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.14.1; 9.14.1.6; 9.14.1.10; 9.14.1.15; 9.14.1.19; 9.14.1.30; +34 more |
| CVE-2021-1422 | 7.7 | Jul 16 | A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.16.1 |
| CVE-2017-6610 | 7.7 | Apr 20 | A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more |
| CVE-2017-6609 | 7.7 | Apr 20 | A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more |
| CVE-2023-20006 | 7.5 | Jun 28 | A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for… Affected: 9.16.4; 9.18.2; 9.18.2.5 |
| CVE-2022-20947 | 7.5 | Nov 15 | A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an… Affected: 9.6.1; 9.6.1.3; 9.6.1.5; 9.6.1.10; 9.6.2; 9.6.2.1; +34 more |
| CVE-2022-20866 | 7.5 | Aug 10 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability Affected: 9.16.0 before 9.16.3.19; 9.17.0 before 9.17.1.13; 9.18.0 before 9.18.2 |
| CVE-2022-20760 | 7.5 | May 3 | A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |
| CVE-2022-20745 | 7.5 | May 3 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |
| CVE-2022-20795 | 7.5 | Apr 21 | A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.17.0 through 9.17.1.9 |
| CVE-2021-34704 | 7.5 | Jan 11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.15 before 9.15.1.17; 9.16 before 9.16.2 |
| CVE-2021-1573 | 7.5 | Jan 11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8 before 9.8.4.40; 9.9 before 9.12.4.26; 9.13 before 9.14.3; 9.15 before 9.15.1.17; 9.16 before 9.16.1.28 |
| CVE-2021-40118 | 7.5 | Oct 27 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.9.0 before 9.12.4.29; 9.13.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2.3 |
| CVE-2021-40117 | 7.5 | Oct 27 | A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.9.0 before 9.12.4.26; 9.13.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2.3 |
| CVE-2021-34792 | 7.5 | Oct 27 | A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.8.0 before 9.8.4.40; 9.12.0 before 9.12.4.29; 9.14.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2.3 |
| CVE-2021-34783 | 7.5 | Oct 27 | A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.40; 9.12.0 before 9.12.4.29; 9.14.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2 |
| CVE-2021-1504 | 7.5 | Apr 29 | Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a… Affected: 9.7 before 9.8.4.35; 9.9 before 9.9.2.85; 9.10 before 9.12.4.10; 9.13 before 9.13.1.21; 9.14 before 9.14.2.4; 9.15 before 9.15.1.7 |
| CVE-2021-1501 | 7.5 | Apr 29 | A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8 before 9.8.4.34; 9.9 before 9.9.2.85; 9.10 before 9.12.4.18; 9.13 before 9.13.1.21; 9.14 before 9.14.2.13; 9.15 before 9.15.1.15 |
| CVE-2021-1445 | 7.5 | Apr 29 | Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a… Affected: 9.7 before 9.8.4.34; 9.9 before 9.9.2.85; 9.10 before 9.12.4.13; 9.13 before 9.13.1.21; 9.14 before 9.14.2.8; 9.15 before 9.15.1.7 |
| CVE-2020-3555 | 7.5 | Oct 21 | A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.7.0 before 9.8.4.24; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.43; 9.12.0 before 9.12.4.2; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.19 |
| CVE-2020-3554 | 7.5 | Oct 21 | A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.30 |
| CVE-2020-3529 | 7.5 | Oct 21 | A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.29; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.30 |
| CVE-2020-3528 | 7.5 | Oct 21 | A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.26; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.19 |
| CVE-2020-3306 | 7.5 | May 6 | A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.7 before 9.8.4.10; 9.9 before 9.10.1.30; 9.12 before 9.12.3 |
| CVE-2020-3305 | 7.5 | May 6 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)… Affected: 9.7 before 9.8.4.10; 9.9 before 9.10.1.30; 9.12 before 9.12.2.9 |
| CVE-2020-3303 | 7.5 | May 6 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.7 before 9.8.4.10; 9.9 before 9.10.1.30; 9.12 before 9.12.2.9 |
| CVE-2020-3298 | 7.5 | May 6 | A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.6.0 through 9.6.4.40; 9.8.0 through 9.8.4.17; 9.9.0 through 9.9.2.66; 9.10.0 through 9.10.1.37; 9.12.0 through 9.12.3.7; 9.13.0 through 9.13.1.7 |
| CVE-2020-3254 | 7.5 | May 6 | Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD)… Affected: 9.6 before 9.6.4.34; 9.8 before 9.8.4.7; 9.9 before 9.9.2.66; 9.10 before 9.10.1.27; 9.12 before 9.12.2.1 |
| CVE-2020-3195 | 7.5 | May 6 | A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.12 before 9.12.3.2; 9.13 before 9.13.1.7 |
| CVE-2019-12698 | 7.5 | Oct 2 | A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.7 before 9.8.4.9; 9.9 before 9.9.2.56; 9.10 before 9.10.1.30; 9.12 before 9.12.2.9; 9.13 before 9.13.1 |
| CVE-2019-12678 | 7.5 | Oct 2 | A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.5 before 9.6.4.34; 9.7 before 9.8.4.7; 9.9 before 9.9.2.56; 9.10 before 9.10.1.27; 9.12 before 9.12.2.1 |
| CVE-2019-12673 | 7.5 | Oct 2 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.7 before 9.8.4.10; 9.9 before 9.9.2.56; 9.10 before 9.10.1.30; 9.12 before 9.12.2.5 |
| CVE-2019-1697 | 7.5 | May 3 | A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense… Affected: before 9.6.4.25 |
| CVE-2019-1687 | 7.5 | May 3 | A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.4.4.34 |
| CVE-2018-15383 | 7.5 | Oct 5 | A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… Affected: 9.3; 9.4; 9.5; 9.6; 9.6(43); 9.7; +3 more |
| CVE-2018-0227 | 7.5 | Apr 19 | A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow… Affected: 9.4.4 through 9.4.4.13; 9.5.3.7 through 9.5.3.9; 9.6.2.9 through 9.6.2.21; 9.6.3 through 9.6.3.17; 9.4.3.1; 9.4.3.2; +2 more |
| CVE-2017-6752 | 7.5 | Aug 7 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames Affected: 9.3.3; 9.6.2 |
| CVE-2016-6431 | 7.5 | Oct 27 | A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker to cause a reload of the… Affected: 8.0.2.11; 8.0.2.15; 8.0.3; 8.0.3.6; 8.0.3.12; 8.0.3.19; +34 more |
| CVE-2016-1367 | 7.5 | Apr 21 | The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6… Affected: 9.4.1 |
| CVE-2015-6360 | 7.5 | Apr 21 | The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686 Affected: 8.1.0.104; 8.2.0.45; 8.2.1; 8.2.1.11; 8.2.2; 8.2.2.9; +34 more |
| CVE-2022-20742 | 7.4 | May 3 | A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |