SF
Product
Secure Firewall Threat Defense
On CISA KEVExploited in the wildRansomware-linked
274
CVEs
11
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 138Medium 130Low 1
Watch
Add Secure Firewall Threat Defense to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20349 In wildKEV | 8.6 | Aug 11 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +34 more |
| CVE-2025-20362 In wildKEV | 8.6 | Sep 25 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Affected: 7.0.0 before 7.0.8.1; 7.1.0 before 7.2.10.2; 7.3.0 before 7.4.2.4; 7.6.0 before 7.6.2.1; 7.7.0 before 7.7.10.1 |
| CVE-2024-20353 In wildKEV | 8.6 | Apr 24 | Cisco ASA and FTD Denial of Service Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2020-3452 In wildKEV | 7.5 | Jul 22 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability Affected: 6.2.3 before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.0.1 |
| CVE-2020-3259 RansomwareIn wildKEV | 7.5 | May 6 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability Affected: 6.2.3 before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.9; 6.5.0 before 6.5.0.5 |
| CVE-2018-0296 In wildKEV | 7.5 | Jun 7 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Affected: 6.0 before 6.1.0; 6.2.1 before 6.2.2.3; 6.2.3; 6.2.3.1 |
| CVE-2022-20759 | 8.8 | May 3 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2; 7.1.0 |
| CVE-2019-12675 | 8.8 | Oct 2 | Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for… Affected: before 6.4.0.2 |
| CVE-2026-20012 | 8.6 | Mar 25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2026-20103 | 8.6 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2026-20101 | 8.6 | Mar 4 | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause… Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2026-20039 | 8.6 | Mar 4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.10; 7.3.0 before 7.4.3; 7.6.0 before 7.6.1; 7.7.0 before 7.7.10 |
| CVE-2025-20182 | 8.6 | May 7 | Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20495 | 8.6 | Oct 23 | A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.4.0.8; 6.4.0.9; 6.4.0.10; +34 more |
| CVE-2024-20494 | 8.6 | Oct 23 | A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +2 more |
| CVE-2024-20426 | 8.6 | Oct 23 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +15 more |
| CVE-2024-20402 | 8.6 | Oct 23 | A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20342 | 8.6 | Oct 23 | Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker to bypass… Affected: before 7.0.6.2; 7.2.0 before 7.2.6; 7.4.0 before 7.4.2; 7.1.0; 7.3.0 |
| CVE-2023-20095 | 8.6 | Nov 1 | A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.0; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; +34 more |
| CVE-2023-20083 | 8.6 | Nov 1 | A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.17; 6.6.0 through 6.6.7.1; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; +2 more |
| CVE-2023-20042 | 8.6 | Nov 1 | A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +15 more |
| CVE-2023-20244 | 8.6 | Nov 1 | A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20086 | 8.6 | Nov 1 | A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2022-20715 | 8.6 | May 3 | A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2; 7.1.0 |
| CVE-2021-34793 | 8.6 | Oct 27 | A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an… Affected: before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3 |
| CVE-2021-1402 | 8.6 | Apr 29 | A vulnerability in the software-based SSL/TLS message handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload… Affected: 6.3.0 before 6.4.0; 6.5.0 before 6.6.0 |
| CVE-2020-3572 | 8.6 | Oct 21 | A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.6.1 |
| CVE-2020-3571 | 8.6 | Oct 21 | A vulnerability in the ICMP ingress packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 4110 appliances could allow an unauthenticated, remote… Affected: 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5 |
| CVE-2020-3563 | 8.6 | Oct 21 | A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5 |
| CVE-2020-3562 | 8.6 | Oct 21 | A vulnerability in the SSL/TLS inspection of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series firewalls could allow an unauthenticated, remote… Affected: 6.3.0; 6.4.0; 6.5.0 |
| CVE-2020-3436 | 8.6 | Oct 21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: through 6.2.2; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 |
| CVE-2020-3373 | 8.6 | Oct 21 | A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.6.0.1 |
| CVE-2020-3304 | 8.6 | Oct 21 | A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2020-3283 | 8.6 | May 6 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000… Affected: 6.4.0 before 6.4.0.9 |
| CVE-2020-3196 | 8.6 | May 6 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 6.2.3 before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.9; 6.5.0 before 6.5.0.5 |
| CVE-2020-3191 | 8.6 | May 6 | A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.3 before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.6 |
| CVE-2020-3189 | 8.6 | May 6 | A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak… Affected: 6.2.3.12; 6.2.3.13; 6.2.3.14; 6.2.3.15 |
| CVE-2019-15256 | 8.6 | Oct 2 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 6.2.0 before 6.2.3.11; 6.3.0 before 6.3.0.2 |
| CVE-2019-1714 | 8.6 | May 3 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in… Affected: 6.2.1 before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2019-1708 | 8.6 | May 3 | A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco… Affected: 6.2.2 through 6.2.3.12; 6.3.0 through 6.3.0.3 |
| CVE-2019-1703 | 8.6 | May 3 | A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for the Cisco Firepower 2100 Series could allow an… Affected: 6.2.1 before 6.2.3.12 |
| CVE-2019-1694 | 8.6 | May 3 | A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2018-15388 | 8.6 | May 3 | A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.2.3.12 |
| CVE-2019-1669 | 8.6 | Jan 24 | Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability Affected: 6.3.0; 6.4.0 |
| CVE-2018-15454 | 8.6 | Nov 1 | A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 6.1.0 before 6.1.0.7; 6.2.0 before 6.2.0.6; 6.2.2 before 6.2.2.4; 6.2.3 before 6.2.3.7 |
| CVE-2018-0240 | 8.6 | Apr 19 | Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 6.1.0 through 6.1.0.7; 6.2.0 before 6.2.0.5; 6.2.1 before 6.2.2.2 |
| CVE-2018-0231 | 8.6 | Apr 19 | A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.0 before 6.1.0.6; 6.2.1 before 6.2.2.1 |
| CVE-2018-0230 | 8.6 | Apr 19 | A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Security Appliances could allow an… Affected: 6.2.1; 6.2.2 |
| CVE-2018-0228 | 8.6 | Apr 19 | A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the CPU to increase… Affected: 6.0 before 6.1.0.6; 6.2.0 before 6.2.0.5; 6.2.1 before 6.2.2.2 |
| CVE-2024-20412 | 8.4 | Oct 23 | A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +17 more |