AS
Product
Adaptive Security Appliance Software
On CISA KEVExploited in the wildRansomware-linked
354
CVEs
14
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 106Medium 87Low 1
Watch
Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20013 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 9.18.1 before 9.18.4.66; 9.19.1 before 9.20.3.20; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.3 |
| CVE-2025-20224 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20384 | 5.8 | Oct 23 | A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2024-20299 | 5.8 | Oct 23 | A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20297 | 5.8 | Oct 23 | A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20293 | 5.8 | May 22 | A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… Affected: 9.19.1 through 9.19.1.24; 9.20.1; 9.20.1.5 |
| CVE-2023-20256 | 5.8 | Nov 1 | Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.4.22; 9.8.4.25; 9.8.4.26; 9.8.4.29; 9.8.4.32; 9.8.4.33; +34 more |
| CVE-2023-20245 | 5.8 | Nov 1 | Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.3.14; 9.8.3.16; 9.8.3.18; 9.8.3.21; 9.8.3.26; 9.8.3.29; +34 more |
| CVE-2022-20928 | 5.8 | Nov 15 | A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software… Affected: 9.6.1; 9.6.1.3; 9.6.1.5; 9.6.1.10; 9.6.2; 9.6.2.1; +34 more |
| CVE-2026-20024 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2026-20020 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2017-6764 | 5.4 | Aug 7 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.5(1) could allow an authenticated, remote attacker to conduct a cross-site… Affected: 9.5(1) |
| CVE-2026-20106 | 5.3 | Mar 4 | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2026-20009 | 5.3 | Mar 4 | A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could… Affected: 9.17.1 before 9.18.4.71; 9.19.1 before 9.20.4.10; 9.22.1.1 before 9.22.2.14; 9.23.1 before 9.23.1.19 |
| CVE-2024-20526 | 5.3 | Oct 23 | A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: 9.16.4.67; 9.16.4.70; 9.18.4.40; 9.20.3 |
| CVE-2024-20493 | 5.3 | Oct 23 | A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2021-34794 | 5.3 | Oct 27 | A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Affected: 9.14.0 before 9.14.2.4; 9.15.0 before 9.15.1.7 |
| CVE-2021-34791 | 5.3 | Oct 27 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: 9.12.0 before 9.12.4.18; 9.13.0 before 9.14.2.15; 9.15.0 before 9.15.1.15 |
| CVE-2021-34790 | 5.3 | Oct 27 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: 9.12.0 before 9.12.4.29; 9.13.0 before 9.14.2.15; 9.15.0 before 9.15.1.15 |
| CVE-2021-34787 | 5.3 | Oct 27 | A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.9.0 before 9.12.4.25; 9.13.0 before 9.14.3.1; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.1.28 |
| CVE-2020-3564 | 5.3 | Oct 21 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.0 before 9.8.4.26; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.19 |
| CVE-2017-3867 | 5.3 | Mar 17 | A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA) Software could allow an… Affected: 6.3.1; 9.6.2; 9.6.2.1; 9.6.2.2; 9.6.2.3; 9.6.2.7; +3 more |
| CVE-2016-1445 | 5.3 | Jul 12 | Cisco Adaptive Security Appliance (ASA) Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes Affected: 8.2 before 9.4.3.3 |
| CVE-2016-1295 | 5.3 | Jan 16 | Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775 Affected: 8.4.0; 8.4.1; 8.4.1.3; 8.4.1.11; 8.4.2; 8.4.2.1; +20 more |
| CVE-2007-4786 | 5.3 | Sep 10 | Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes… Affected: 7.0 before 7.0.7.1; 7.1 before 7.1.2.61; 7.2 before 7.2.2.34; 8.0 before 8.0.2.11 |
| CVE-2024-20355 | 5.0 | May 22 | A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Affected: 9.8.2.28; 9.8.2.33; 9.8.2.35; 9.8.2.38; 9.8.3; 9.8.3.8; +34 more |
| CVE-2019-12693 | 4.9 | Oct 2 | A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service… Affected: 9.7 before 9.8.4; 9.9 before 9.9.2.50; 9.10 before 9.10.1.22; 9.12 before 9.12.2.1 |
| CVE-2019-1701 | 4.8 | May 3 | Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated,… Affected: before 9.4.4.34 |
| CVE-2020-3561 | 4.7 | Oct 21 | A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.20; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.43; 9.12.0 before 9.12.3.9; 9.13.0 before 9.13.1.10; 9.14.0 before 9.14.1.10 |
| CVE-2026-20021 | 4.3 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1 through 9.12.4.67; 9.16.1 through 9.16.4.85; 9.17.1 through 9.17.1.46; 9.18.1 through 9.18.4.68; 9.19.1 through 9.19.1.42; 9.20.1 through 9.20.4.14; +2 more |
| CVE-2026-20069 | 4.3 | Mar 4 | A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2023-20275 | 4.3 | Dec 12 | A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2023-20247 | 4.3 | Nov 1 | A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2015-6423 | 4.3 | Jan 15 | The DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 through 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only… Affected: 9.4.1; 9.4.1.1; 9.4.1.2; 9.4.1.3; 9.4.1.5; 9.4.2; +1 more |
| CVE-2017-6770 | 4.2 | Aug 7 | Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability… Affected: 7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; +34 more |
| CVE-2018-15398 | 4.0 | Oct 5 | A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.6(4.3) |
| CVE-2017-3793 | 4.0 | Apr 20 | A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 through 8.7 and 9.0 through 9.6) and Cisco Firepower Threat Defense (FTD) Software… Affected: 8.0.1.2; 8.0.2; 8.0.2.11; 8.0.2.15; 8.0.3; 8.0.3.6; +34 more |