Adaptive Security Appliance Software vulnerabilities

Product

Adaptive Security Appliance Software

by Cisco · last CVE Aug 11, 2026

On CISA KEVExploited in the wildRansomware-linked

354

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities354 In the news8 Timeline

Severity mix

Critical 8High 106Medium 87Low 1

Severity

All severities354 Critical8 High106 Medium87 Low1

Exploitation

On CISA KEV14 Exploited in the wild14

Watch

Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-3583	6.1	1%	Oct 21	Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.7 before 9.8.4.29; 9.9 before 9.9.2.80; 9.10 before 9.10.1.44; 9.12 before 9.12.4.4; 9.13 before 9.13.1.13; 9.14 before 9.14.1.30
CVE-2020-3582	6.1	1%	Oct 21	Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.8.4.26; 9.9 before 9.9.2.80; 9.10 before 9.10.1.44; 9.12 before 9.12.4.4; 9.13 before 9.13.1.13; 9.14 before 9.14.1.30
CVE-2020-3581	6.1	1%	Oct 21	Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.8.4.29; 9.9 before 9.9.2.80; 9.10 before 9.10.1.44; 9.12 before 9.12.4.4; 9.13 before 9.13.1.13; 9.14 before 9.14.1.30
CVE-2019-12695	6.1	1%	Oct 2	A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.7 before 9.8.4.9; 9.9 before 9.9.2.56; 9.10 before 9.10.1.30; 9.12 before 9.12.2.9; 9.13 before 9.13.1
CVE-2018-0251	6.1	2%	Apr 19	A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal of Cisco Adaptive Security Appliance (ASA) Software could… Affected: 9.8(2.15); 9.9(1)
CVE-2018-0242	6.1	2%	Apr 19	A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 9.1(7.245); 9.6(3); 9.8(1); 9.8(2)
CVE-2017-6765	6.1	2%	Aug 7	A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) could allow an unauthenticated, remote attacker to conduct… Affected: 9.1(6.11); 9.4(1.2)
CVE-2026-20008	6.0	0%	Mar 4	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7
CVE-2024-20331	5.9	1%	Oct 23	A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2023-20081	5.9	1%	Mar 23	A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2019-1705	5.9	2%	May 3	A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of… Affected: 9.4 before 9.4.4.34; 9.5 before 9.6.4.25; 9.7 before 9.8.4; 9.9 before 9.9.2.50; 9.10 before 9.10.1.17
CVE-2016-6461	5.9	2%	Nov 19	A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to inject arbitrary XML… Affected: 9.1(7)4; 9.1(7)7; 9.1(7)9; 9.1(7)11; 9.1(7)12; 9.1.6.10; +34 more
CVE-2026-20073	5.8	0%	Mar 4	Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass Vulnerability Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more
CVE-2026-20015	5.8	0%	Mar 4	A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 9.18.1 before 9.18.4.71; 9.19.1 before 9.20.4.10; 9.22.1.1 before 9.22.2.13; 9.23.1 before 9.23.1.19
CVE-2026-20013	5.8	0%	Mar 4	A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 9.18.1 before 9.18.4.66; 9.19.1 before 9.20.3.20; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.3
CVE-2025-20224	5.8	1%	Aug 14	A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20384	5.8	0%	Oct 23	A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2024-20299	5.8	0%	Oct 23	A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20297	5.8	0%	Oct 23	A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20293	5.8	0%	May 22	A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… Affected: 9.19.1 through 9.19.1.24; 9.20.1; 9.20.1.5
CVE-2023-20256	5.8	1%	Nov 1	Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.4.22; 9.8.4.25; 9.8.4.26; 9.8.4.29; 9.8.4.32; 9.8.4.33; +34 more
CVE-2023-20245	5.8	0%	Nov 1	Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.3.14; 9.8.3.16; 9.8.3.18; 9.8.3.21; 9.8.3.26; 9.8.3.29; +34 more
CVE-2022-20928	5.8	1%	Nov 15	A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software… Affected: 9.6.1; 9.6.1.3; 9.6.1.5; 9.6.1.10; 9.6.2; 9.6.2.1; +34 more
CVE-2026-20024	5.7	0%	Mar 4	A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more
CVE-2026-20020	5.7	0%	Mar 4	A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more
CVE-2017-6764	5.4	1%	Aug 7	A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.5(1) could allow an authenticated, remote attacker to conduct a cross-site… Affected: 9.5(1)
CVE-2026-20106	5.3	0%	Mar 4	A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7
CVE-2026-20009	5.3	0%	Mar 4	Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability Affected: 9.17.1 before 9.18.4.71; 9.19.1 before 9.20.4.10; 9.22.1.1 before 9.22.2.14; 9.23.1 before 9.23.1.19
CVE-2024-20526	5.3	0%	Oct 23	A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: 9.16.4.67; 9.16.4.70; 9.18.4.40; 9.20.3
CVE-2024-20493	5.3	1%	Oct 23	A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2021-34794	5.3	1%	Oct 27	A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Affected: 9.14.0 before 9.14.2.4; 9.15.0 before 9.15.1.7
CVE-2021-34791	5.3	1%	Oct 27	Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: 9.12.0 before 9.12.4.18; 9.13.0 before 9.14.2.15; 9.15.0 before 9.15.1.15
CVE-2021-34790	5.3	1%	Oct 27	Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: 9.12.0 before 9.12.4.29; 9.13.0 before 9.14.2.15; 9.15.0 before 9.15.1.15
CVE-2021-34787	5.3	1%	Oct 27	A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.9.0 before 9.12.4.25; 9.13.0 before 9.14.3.1; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.1.28
CVE-2020-3564	5.3	1%	Oct 21	A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.0 before 9.8.4.26; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.44; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.19
CVE-2017-3867	5.3	2%	Mar 17	A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA) Software could allow an… Affected: 6.3.1; 9.6.2; 9.6.2.1; 9.6.2.2; 9.6.2.3; 9.6.2.7; +3 more
CVE-2016-1445	5.3	1%	Jul 12	Cisco Adaptive Security Appliance (ASA) Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes Affected: 8.2 before 9.4.3.3
CVE-2016-1295	5.3	2%	Jan 16	Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775 Affected: 8.4.0; 8.4.1; 8.4.1.3; 8.4.1.11; 8.4.2; 8.4.2.1; +20 more
CVE-2007-4786	5.3	0%	Sep 10	Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes… Affected: 7.0 before 7.0.7.1; 7.1 before 7.1.2.61; 7.2 before 7.2.2.34; 8.0 before 8.0.2.11
CVE-2024-20355	5.0	0%	May 22	A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Affected: 9.8.2.28; 9.8.2.33; 9.8.2.35; 9.8.2.38; 9.8.3; 9.8.3.8; +34 more
CVE-2019-12693	4.9	1%	Oct 2	A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service… Affected: 9.7 before 9.8.4; 9.9 before 9.9.2.50; 9.10 before 9.10.1.22; 9.12 before 9.12.2.1
CVE-2019-1701	4.8	1%	May 3	Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated,… Affected: before 9.4.4.34
CVE-2020-3561	4.7	1%	Oct 21	A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.0 before 9.8.4.20; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.43; 9.12.0 before 9.12.3.9; 9.13.0 before 9.13.1.10; 9.14.0 before 9.14.1.10
CVE-2026-20021	4.3	0%	Mar 4	A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1 through 9.12.4.67; 9.16.1 through 9.16.4.85; 9.17.1 through 9.17.1.46; 9.18.1 through 9.18.4.68; 9.19.1 through 9.19.1.42; 9.20.1 through 9.20.4.14; +2 more
CVE-2026-20069	4.3	0%	Mar 4	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7
CVE-2023-20275	4.3	0%	Dec 12	A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2023-20247	4.3	0%	Nov 1	A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2015-6423	4.3	1%	Jan 15	The DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 through 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only… Affected: 9.4.1; 9.4.1.1; 9.4.1.2; 9.4.1.3; 9.4.1.5; 9.4.2; +1 more
CVE-2017-6770	4.2	2%	Aug 7	Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability… Affected: 7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; +34 more
CVE-2018-15398	4.0	2%	Oct 5	A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.6(4.3)