AS
Product
Adaptive Security Appliance Software
On CISA KEVExploited in the wildRansomware-linked
354
CVEs
14
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 106Medium 87Low 1
Watch
Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3580 RansomwareIn wildKEV | 6.1 | Oct 21 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities Affected: before 9.8.4.34; 9.9 before 9.9.2.85; 9.10 before 9.12.4.13; 9.13 before 9.13.1.21; 9.14 before 9.14.2.8; 9.15 before 9.15.1.15 |
| CVE-2014-2120 In wildKEV | 6.1 | Mar 19 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Affected: 0 |
| CVE-2024-20359 In wildKEV | 6.0 | Apr 24 | Cisco ASA and FTD Privilege Escalation Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20481 In wildKEV | 5.8 | Oct 23 | Cisco ASA and FTD Denial-of-Service Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2026-20025 | 6.8 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2022-20826 | 6.8 | Nov 15 | A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat… Affected: 9.17.1; 9.17.1.9; 9.17.1.10; 9.17.1.13; 9.18.1; 9.18.1.3 |
| CVE-2018-15399 | 6.8 | Oct 5 | A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.4(4); 9.8(2) |
| CVE-2018-15397 | 6.8 | Oct 5 | A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 9.6.4; 9.8.2; 9.9.1; 9.9.1(1) |
| CVE-2026-20016 | 6.7 | Mar 4 | A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2024-20485 | 6.7 | Oct 23 | A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20358 | 6.7 | Apr 24 | A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2021-1488 | 6.7 | Apr 29 | A vulnerability in the upgrade process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 9.13 before 9.13.1.21; 9.14 before 9.14.2.13; 9.15 before 9.15.1.10 |
| CVE-2021-1476 | 6.7 | Apr 29 | A vulnerability in the CLI of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to… Affected: 9.13 before 9.13.1.21; 9.14 before 9.14.2.13; 9.15 before 9.15.1.10 |
| CVE-2020-3458 | 6.7 | Oct 21 | Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software for the Firepower 1000 Series… Affected: 9.8.0 before 9.8.4.26; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.43; 9.12.0 before 9.12.4.3; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.15 |
| CVE-2020-3457 | 6.7 | Oct 21 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges Affected: 9.8 before 9.8.4.29; 9.9 before 9.9.2.80; 9.10 before 9.10.1.40; 9.12 before 9.12.4.3; 9.13 before 9.13.1.13 |
| CVE-2020-3166 | 6.7 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS) Affected: 9.8 before 9.9.2.66; 9.10 before 9.13.1.5 |
| CVE-2026-20023 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2026-20022 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2022-20927 | 6.5 | Nov 15 | A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote… Affected: 9.13.1; 9.13.1.2; 9.13.1.7; 9.13.1.10; 9.13.1.12; 9.13.1.13; +28 more |
| CVE-2022-20924 | 6.5 | Nov 15 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.14.1; 9.14.1.6; 9.14.1.10; 9.14.1.15; 9.14.1.19; 9.14.1.30; +34 more |
| CVE-2021-40125 | 6.5 | Oct 27 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.8.0 before 9.8.4.40; 9.9.0 before 9.12.4.30; 9.14.0 before 9.14.3.9; 9.15.0 before 9.15.1.17; 9.16.0 before 9.16.2 |
| CVE-2020-3578 | 6.5 | Oct 21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.6.4.45; 9.7 before 9.8.4.26; 9.9 before 9.9.2.80; 9.10 before 9.10.1.44; 9.12 before 9.12.4.4; 9.13 before 9.13.1.13; +1 more |
| CVE-2019-12677 | 6.5 | Oct 2 | A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial… Affected: 9.3 before 9.3.3.9 |
| CVE-2019-1695 | 6.5 | May 3 | A vulnerability in the detection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.8.4 |
| CVE-2019-1693 | 6.5 | May 3 | A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote… Affected: before 9.4.4.34 |
| CVE-2018-0229 | 6.5 | Apr 19 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop… Affected: 9.8(1.245) |
| CVE-2016-6424 | 6.5 | Oct 6 | The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service (interface wedge) via a… Affected: 8.4.7.29; 9.1(7)4 |
| CVE-2016-1379 | 6.5 | May 28 | Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service (memory… Affected: 9.0.1; 9.0.2; 9.0.2.10; 9.0.3; 9.0.3.6; 9.0.3.8; +34 more |
| CVE-2016-1385 | 6.5 | May 26 | The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (instability, memory consumption,… Affected: 8.4.0; 8.4.1; 8.4.1.3; 8.4.1.11; 8.4.2; 8.4.2.1; +34 more |
| CVE-2026-20102 | 6.1 | Mar 4 | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.16.1 before 9.16.4.89; 9.17.1 before 9.18.4.71; 9.20.1 before 9.20.4.19; 9.22.1.1 before 9.22.2.32; 9.23.1 before 9.23.1.26 |
| CVE-2026-20070 | 6.1 | Mar 4 | A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2024-20382 | 6.1 | Oct 23 | A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20341 | 6.1 | Oct 23 | A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2023-20264 | 6.1 | Nov 1 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA)… Affected: 9.18.1 through 9.18.3.46; 9.19.1.5 through 9.19.1.12 |
| CVE-2022-20713 | 6.1 | Aug 10 | A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2020-3599 | 6.1 | Oct 21 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 9.7.0 before 9.8.4.29; 9.9.0 before 9.9.2.80; 9.10.0 before 9.10.1.43; 9.12.0 before 9.12.4.4; 9.13.0 before 9.13.1.13; 9.14.0 before 9.14.1.29 |
| CVE-2020-3583 | 6.1 | Oct 21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.7 before 9.8.4.29; 9.9 before 9.9.2.80; 9.10 before 9.10.1.44; 9.12 before 9.12.4.4; 9.13 before 9.13.1.13; 9.14 before 9.14.1.30 |
| CVE-2020-3582 | 6.1 | Oct 21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.8.4.26; 9.9 before 9.9.2.80; 9.10 before 9.10.1.44; 9.12 before 9.12.4.4; 9.13 before 9.13.1.13; 9.14 before 9.14.1.30 |
| CVE-2020-3581 | 6.1 | Oct 21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.8.4.29; 9.9 before 9.9.2.80; 9.10 before 9.10.1.44; 9.12 before 9.12.4.4; 9.13 before 9.13.1.13; 9.14 before 9.14.1.30 |
| CVE-2019-12695 | 6.1 | Oct 2 | A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.7 before 9.8.4.9; 9.9 before 9.9.2.56; 9.10 before 9.10.1.30; 9.12 before 9.12.2.9; 9.13 before 9.13.1 |
| CVE-2018-0251 | 6.1 | Apr 19 | A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal of Cisco Adaptive Security Appliance (ASA) Software could… Affected: 9.8(2.15); 9.9(1) |
| CVE-2018-0242 | 6.1 | Apr 19 | A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 9.1(7.245); 9.6(3); 9.8(1); 9.8(2) |
| CVE-2017-6765 | 6.1 | Aug 7 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) could allow an unauthenticated, remote attacker to conduct… Affected: 9.1(6.11); 9.4(1.2) |
| CVE-2026-20008 | 6.0 | Mar 4 | A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)… Affected: 9.12.1 before 9.16.4.85; 9.17.1 before 9.18.4.66; 9.19.1 before 9.20.4; 9.22.1.1 before 9.22.2.4; 9.23.1 before 9.23.1.7 |
| CVE-2024-20331 | 5.9 | Oct 23 | A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2023-20081 | 5.9 | Mar 23 | A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2019-1705 | 5.9 | May 3 | A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of… Affected: 9.4 before 9.4.4.34; 9.5 before 9.6.4.25; 9.7 before 9.8.4; 9.9 before 9.9.2.50; 9.10 before 9.10.1.17 |
| CVE-2016-6461 | 5.9 | Nov 19 | A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to inject arbitrary XML… Affected: 9.1(7)4; 9.1(7)7; 9.1(7)9; 9.1(7)11; 9.1(7)12; 9.1.6.10; +34 more |
| CVE-2026-20073 | 5.8 | Mar 4 | A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.1; 9.12.2.4; +34 more |
| CVE-2026-20015 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 9.18.1 before 9.18.4.71; 9.19.1 before 9.20.4.10; 9.22.1.1 before 9.22.2.13; 9.23.1 before 9.23.1.19 |