AS
Product
Adaptive Security Appliance Software
On CISA KEVExploited in the wildRansomware-linked
354
CVEs
14
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 106Medium 87Low 1
Watch
Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-12698 | 7.5 | Oct 2 | A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.7 before 9.8.4.9; 9.9 before 9.9.2.56; 9.10 before 9.10.1.30; 9.12 before 9.12.2.9; 9.13 before 9.13.1 |
| CVE-2019-12678 | 7.5 | Oct 2 | A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.5 before 9.6.4.34; 9.7 before 9.8.4.7; 9.9 before 9.9.2.56; 9.10 before 9.10.1.27; 9.12 before 9.12.2.1 |
| CVE-2019-12673 | 7.5 | Oct 2 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.7 before 9.8.4.10; 9.9 before 9.9.2.56; 9.10 before 9.10.1.30; 9.12 before 9.12.2.5 |
| CVE-2019-1697 | 7.5 | May 3 | A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense… Affected: before 9.6.4.25 |
| CVE-2019-1687 | 7.5 | May 3 | A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.4.4.34 |
| CVE-2018-15383 | 7.5 | Oct 5 | A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… Affected: 9.3; 9.4; 9.5; 9.6; 9.6(43); 9.7; +3 more |
| CVE-2018-0227 | 7.5 | Apr 19 | A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow… Affected: 9.4.4 through 9.4.4.13; 9.5.3.7 through 9.5.3.9; 9.6.2.9 through 9.6.2.21; 9.6.3 through 9.6.3.17; 9.4.3.1; 9.4.3.2; +2 more |
| CVE-2017-6752 | 7.5 | Aug 7 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames Affected: 9.3.3; 9.6.2 |
| CVE-2016-6431 | 7.5 | Oct 27 | A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker to cause a reload of the… Affected: 8.0.2.11; 8.0.2.15; 8.0.3; 8.0.3.6; 8.0.3.12; 8.0.3.19; +34 more |
| CVE-2016-1367 | 7.5 | Apr 21 | The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6… Affected: 9.4.1 |
| CVE-2015-6360 | 7.5 | Apr 21 | The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686 Affected: 8.1.0.104; 8.2.0.45; 8.2.1; 8.2.1.11; 8.2.2; 8.2.2.9; +34 more |
| CVE-2022-20742 | 7.4 | May 3 | A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |
| CVE-2020-3334 | 7.4 | May 6 | A vulnerability in the ARP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series… Affected: 9.10 before 9.10.1.37; 9.12 before 9.12.3; 9.13 before 9.13.1.2 |
| CVE-2019-12676 | 7.4 | Oct 2 | A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.7 before 9.8.4.8; 9.9 before 9.9.2.59; 9.10 before 9.10.1.27; 9.12 before 9.12.2.1 |
| CVE-2019-1944 | 7.3 | Aug 7 | Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the… Affected: before 9.4.4.37 |
| CVE-2019-15992 | 7.2 | Sep 23 | A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.7 before 9.8.4.15; 9.9 before 9.9.2.61; 9.10 before 9.10.1.32; 9.12 before 9.12.3; 9.13 before 9.13.1.4; 9.14 before 9.14.2.7; +1 more |
| CVE-2022-20737 | 7.1 | May 3 | A vulnerability in the handler for HTTP authentication for resources accessed through the Clientless SSL VPN portal of Cisco Adaptive Security Appliance (ASA) Software could allow… Affected: before 9.12.4.38; 9.13.0 before 9.14.4; 9.15.0 before 9.15.1.21; 9.16.0 before 9.16.2.14; 9.17.0 before 9.17.1.7 |
| CVE-2021-1493 | 7.1 | Apr 29 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated,… Affected: 9.8 before 9.8.4.34; 9.9 before 9.9.2.85; 9.10 before 9.12.4.13; 9.13 before 9.13.1.21; 9.14 before 9.14.2.8; 9.15 before 9.15.1.7 |
| CVE-2026-20025 | 6.8 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2022-20826 | 6.8 | Nov 15 | A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat… Affected: 9.17.1; 9.17.1.9; 9.17.1.10; 9.17.1.13; 9.18.1; 9.18.1.3 |
| CVE-2018-15399 | 6.8 | Oct 5 | A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.4(4); 9.8(2) |
| CVE-2018-15397 | 6.8 | Oct 5 | A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 9.6.4; 9.8.2; 9.9.1; 9.9.1(1) |
| CVE-2026-20016 | 6.7 | Mar 4 | A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2024-20485 | 6.7 | Oct 23 | A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20358 | 6.7 | Apr 24 | A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2021-1488 | 6.7 | Apr 29 | A vulnerability in the upgrade process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 9.13 before 9.13.1.21; 9.14 before 9.14.2.13; 9.15 before 9.15.1.10 |
| CVE-2021-1476 | 6.7 | Apr 29 | A vulnerability in the CLI of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to… Affected: 9.13 before 9.13.1.21; 9.14 before 9.14.2.13; 9.15 before 9.15.1.10 |
| CVE-2020-3458 | 6.7 | Oct 21 | Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software for the Firepower 1000 Series… Affected: 9.8.0 before 9.8.4.26; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.43; 9.12.0 before 9.12.4.3; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.15 |
| CVE-2020-3457 | 6.7 | Oct 21 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges Affected: 9.8 before 9.8.4.29; 9.9 before 9.9.2.80; 9.10 before 9.10.1.40; 9.12 before 9.12.4.3; 9.13 before 9.13.1.13 |
| CVE-2020-3166 | 6.7 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS) Affected: 9.8 before 9.9.2.66; 9.10 before 9.13.1.5 |
| CVE-2026-20023 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2026-20022 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2022-20927 | 6.5 | Nov 15 | A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote… Affected: 9.13.1; 9.13.1.2; 9.13.1.7; 9.13.1.10; 9.13.1.12; 9.13.1.13; +28 more |
| CVE-2022-20924 | 6.5 | Nov 15 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.14.1; 9.14.1.6; 9.14.1.10; 9.14.1.15; 9.14.1.19; 9.14.1.30; +34 more |
| CVE-2021-40125 | 6.5 | Oct 27 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.8.0 before 9.8.4.40; 9.9.0 before 9.12.4.30; 9.14.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2 |
| CVE-2020-3578 | 6.5 | Oct 21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.6.4.45; 9.7 before 9.8.4.26; 9.9 before 9.9.2.80; 9.10 before 9.10.1.44; 9.12 before 9.12.4.4; 9.13 before 9.13.1.13; +1 more |
| CVE-2019-12677 | 6.5 | Oct 2 | A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial… Affected: 9.3 before 9.3.3.9 |
| CVE-2019-1695 | 6.5 | May 3 | A vulnerability in the detection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.8.4 |
| CVE-2019-1693 | 6.5 | May 3 | A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote… Affected: before 9.4.4.34 |
| CVE-2018-0229 | 6.5 | Apr 19 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop… Affected: 9.8(1.245) |
| CVE-2016-6424 | 6.5 | Oct 6 | The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service (interface wedge) via a… Affected: 8.4.7.29; 9.1(7)4 |
| CVE-2016-1379 | 6.5 | May 28 | Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service (memory… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more |
| CVE-2016-1385 | 6.5 | May 26 | The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (instability, memory consumption,… Affected: 8.4.0; 8.4.1; 8.4.1.3; 8.4.1.11; 8.4.2; 8.4.2.1; +34 more |
| CVE-2026-20102 | 6.1 | Mar 4 | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.16.1 before 9.16.4.89; 9.17.1 before 9.18.4.71; 9.20.1 before 9.20.4.19; 9.22.1.1 before 9.22.2.32; 9.23.1 before 9.23.1.26 |
| CVE-2026-20070 | 6.1 | Mar 4 | A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2024-20382 | 6.1 | Oct 23 | A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20341 | 6.1 | Oct 23 | A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2023-20264 | 6.1 | Nov 1 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA)… Affected: 9.18.1 through 9.18.3.46; 9.19.1.5 through 9.19.1.12 |
| CVE-2022-20713 | 6.1 | Aug 10 | A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2020-3599 | 6.1 | Oct 21 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 9.7.0 before 9.8.4.29; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.43; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.29 |