Adaptive Security Appliance Software vulnerabilities

Product

Adaptive Security Appliance Software

by Cisco · last CVE Aug 11, 2026

On CISA KEVExploited in the wildRansomware-linked

354

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities354 In the news8 Timeline

Severity mix

Critical 8High 106Medium 87Low 1

Severity

All severities354 Critical8 High106 Medium87 Low1

Exploitation

On CISA KEV14 Exploited in the wild14

Watch

Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-3793	4.0	2%	Apr 20	A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 through 8.7 and 9.0 through 9.6) and Cisco Firepower Threat Defense (FTD) Software… Affected: 8.0.1.2; 8.0.2; 8.0.2.11; 8.0.2.15; 8.0.3; 8.0.3.6; +34 more
CVE-2020-3585	3.7	1%	Oct 21	A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000 Series firewalls… Affected: before 9.13.1.13; 9.14 before 9.14.1.30
CVE-2015-6379	–	2%	Nov 25	The XML parser in the management interface in Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote authenticated users to cause a denial of service (device crash)… Affected: 8.4.0
CVE-2015-6327	–	2%	Oct 25	The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0… Affected: 7.2.1; 7.2.1.9; 7.2.1.13; 7.2.1.19; 7.2.1.24; 7.2.2; +34 more
CVE-2015-6326	–	2%	Oct 25	Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before… Affected: 7.2.1; 7.2.1.9; 7.2.1.13; 7.2.1.19; 7.2.1.24; 7.2.2; +34 more
CVE-2015-6325	–	3%	Oct 25	Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before… Affected: 7.2.1; 7.2.1.9; 7.2.1.13; 7.2.1.19; 7.2.1.24; 7.2.2; +34 more
CVE-2015-6324	–	2%	Oct 25	The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) software 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(3.5), and 9.4… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more
CVE-2015-4321	–	2%	Aug 20	The Unicast Reverse Path Forwarding (uRPF) implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3), and 9.4(1) mishandles cases where an… Affected: 9.3(1.50); 9.3(2.100); 9.3(3); 9.4(1)
CVE-2015-4458	–	1%	Jul 18	The TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco Adaptive Security Appliance (ASA) Software 9.1(5.21) and other products, does not… Affected: 9.1.5.21
CVE-2015-4241	–	1%	Jul 8	Cisco Adaptive Security Appliance (ASA) Software 9.3(2) allows remote attackers to cause a denial of service (system reload) by sending crafted OSPFv2 packets on the local… Affected: 9.3(2)
CVE-2015-4239	–	1%	Jul 3	Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device reload) by sending crafted OSPFv2 packets… Affected: 100.13(0.21)
CVE-2015-4238	–	2%	Jul 2	The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial of service (device reload) by… Affected: 8.4(7); 8.6(1.2)
CVE-2015-4550	–	1%	Jun 17	The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value… Affected: 9.3(3); 9.4(1.1)
CVE-2015-0760	–	2%	Jun 4	The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1… Affected: 7.0 before 8.2.2.13
CVE-2015-0742	–	3%	May 21	The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100),… Affected: 9.2(3.4); 9.4(0.115); 100.13(0.21); 100.13(20.3); 100.13(21.9)
CVE-2015-0677	–	2%	Apr 13	The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4), and… Affected: 8.4.1; 8.4.1.3; 8.4.1.11; 8.4.2; 8.4.2.1; 8.4.2.8; +34 more
CVE-2015-0676	–	1%	Apr 13	The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before… Affected: 7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; +34 more
CVE-2015-0675	–	1%	Apr 13	The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3) does not properly validate… Affected: 9.1.1; 9.1.1.4; 9.1.2; 9.1.2.8; 9.1.3; 9.1.3.2; +17 more
CVE-2014-8023	–	2%	Feb 17	Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote… Affected: through 9.2.3
CVE-2015-0619	–	2%	Feb 12	Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory… Affected: All versions, or not specified
CVE-2013-5557	–	2%	Feb 7	The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier allows remote authenticated users to… Affected: through 9.1\(2\)
CVE-2015-0578	–	1%	Jan 14	Cisco Adaptive Security Appliance (ASA) Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service (device reload) via crafted DHCP packets… Affected: All versions, or not specified
CVE-2014-3410	–	2%	Dec 20	The syslog-management subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain an administrator password by waiting for an administrator to… Affected: All versions, or not specified
CVE-2014-8012	–	1%	Dec 18	Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script… Affected: All versions, or not specified
CVE-2014-3407	–	2%	Nov 28	The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which… Affected: through 9.3\(2\)
CVE-2014-3394	–	1%	Oct 10	The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1… Affected: 8.2.0.45; 8.2.1; 8.2.1.1; 8.2.2; 8.2.2.10; 8.2.2.12; +34 more
CVE-2014-3393	–	2%	Oct 10	The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.14), 9.0 before… Affected: 8.2; 8.2.0.45; 8.2.1; 8.2.1.1; 8.2.2; 8.2.2.10; +34 more
CVE-2014-3392	–	2%	Oct 10	The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before… Affected: 8.2; 8.2.0.45; 8.2.1; 8.2.1.1; 8.2.2; 8.2.2.10; +34 more
CVE-2014-3391	–	0%	Oct 10	Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a Trojan horse library… Affected: 8.7.8
CVE-2014-3390	–	0%	Oct 10	The Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software 8.7 before 8.7(1.14), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows local users to… Affected: 8.7.8
CVE-2014-3399	–	1%	Oct 7	The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during creation of a SharePoint… Affected: through 9.2\(2.4\)
CVE-2014-3398	–	2%	Oct 5	The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain potentially sensitive software-version information by reading the… Affected: All versions, or not specified
CVE-2013-6691	–	2%	Jul 14	The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote CIFS servers to cause a denial of service (device reload)… Affected: through 9.0\(4.1\)
CVE-2013-5567	–	2%	Jul 14	Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote… Affected: through 8.4\(6\)
CVE-2014-2151	–	1%	Jun 18	The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain sensitive information via a crafted… Affected: through 8.4\(7.15\)
CVE-2014-3264	–	1%	May 20	Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a… Affected: through 9.1\(5\)
CVE-2014-2181	–	2%	May 7	Cisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the… Affected: All versions, or not specified
CVE-2014-2182	–	1%	Apr 29	Cisco Adaptive Security Appliance (ASA) Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service (device reload) via a crafted DHCPv6… Affected: All versions, or not specified
CVE-2014-2154	–	2%	Apr 23	Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and… Affected: All versions, or not specified
CVE-2014-2129	–	2%	Apr 10	The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows remote… Affected: 8.2; 8.4; 9.0; 9.1
CVE-2014-2128	–	2%	Apr 10	The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40), 8.4 before 8.4(7.3), 8.6 before 8.6(1.13), 9.0 before… Affected: 8.2; 8.3(1); 8.4; 8.6; 9.0; 9.1
CVE-2014-2127	–	12%	Apr 10	Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before… Affected: 8.0; 8.1; 8.2; 8.3(1); 8.4; 8.6; +2 more
CVE-2014-2126	–	2%	Apr 10	Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and 9.1 before 9.1(3.4) allows remote… Affected: 8.2; 8.4; 8.7; 9.0; 9.1
CVE-2014-0739	–	1%	Feb 22	Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass sec_db authentication and… Affected: 9.1(3)
CVE-2014-0738	–	1%	Feb 22	The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authentication and change trust relationships… Affected: All versions, or not specified
CVE-2013-6707	–	2%	Dec 7	Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service… Affected: through 9.1\(3\)
CVE-2013-6696	–	2%	Dec 2	Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service… Affected: All versions, or not specified
CVE-2013-6682	–	1%	Nov 13	The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers… Affected: through 9.0.3\(6\)
CVE-2013-5568	–	1%	Nov 13	The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service (device reload) via… Affected: through 9.0.3\(6\)
CVE-2013-5560	–	2%	Nov 13	The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows… Affected: through 9.1\(3\)