SF
Product
Secure Firewall Threat Defense
On CISA KEVExploited in the wildRansomware-linked
274
CVEs
11
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 138Medium 130Low 1
Watch
Add Secure Firewall Threat Defense to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20052 | 5.8 | Mar 4 | Cisco Secure Firewall Threat Defense Software Snort 3 Memory Management Denial of Service Vulnerability Affected: 7.4.0; 7.4.1; 7.4.1.1; 7.4.2; 7.4.2.1; 7.6.0 |
| CVE-2026-20007 | 5.8 | Mar 4 | Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20006 | 5.8 | Mar 4 | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TLS with Snort 3 Denial of Service Vulnerability Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +27 more |
| CVE-2026-20015 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 7.2.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2026-20013 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 7.2.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.10 |
| CVE-2026-20005 | 5.8 | Mar 4 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine… Affected: 7.6.0; 7.6.1; 7.6.2; 7.6.2.1; 7.7.0; 7.7.10; +1 more |
| CVE-2025-20224 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20431 | 5.8 | Oct 23 | A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +26 more |
| CVE-2024-20407 | 5.8 | Oct 23 | A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20384 | 5.8 | Oct 23 | A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +32 more |
| CVE-2024-20299 | 5.8 | Oct 23 | A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20297 | 5.8 | Oct 23 | A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20363 | 5.8 | May 22 | Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass… Affected: 7.4.0 |
| CVE-2024-20293 | 5.8 | May 22 | A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… Affected: 7.3.0 through 7.4.0 |
| CVE-2024-20261 | 5.8 | May 22 | A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20071 | 5.8 | Nov 1 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an… Affected: before 6.4.0.17; 6.5.0 before 7.0.6; 7.1.0 before 7.2.4; 7.3.0 before 7.3.1.2; 6.7.0 before 7.0.5; 7.1.0 before 7.1.0.3; +1 more |
| CVE-2023-20270 | 5.8 | Nov 1 | A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat Defense (FTD) Software… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +6 more |
| CVE-2023-20256 | 5.8 | Nov 1 | Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.4.0.10; 6.4.0.11; 6.4.0.12; +34 more |
| CVE-2023-20245 | 5.8 | Nov 1 | Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3.3; 6.2.3.4; 6.2.3.5; 6.2.3.6; 6.2.3.7; 6.2.3.8; +34 more |
| CVE-2022-20943 | 5.8 | Nov 15 | Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1 |
| CVE-2022-20928 | 5.8 | Nov 15 | A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2020-3565 | 5.8 | Oct 21 | A vulnerability in the TCP Intercept functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Access… Affected: before 6.4.0.8; 6.5.0 before 6.5.0.4; 6.5.0.5 before 6.6.0 |
| CVE-2020-3299 | 5.8 | Oct 21 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for… Affected: 6.0.0 before 6.3.0.1 |
| CVE-2020-3285 | 5.8 | May 6 | A vulnerability in the Transport Layer Security version 1.3 (TLS 1.3) policy with URL category functionality for Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.4.0 through 6.4.0.8 |
| CVE-2019-1981 | 5.8 | Nov 5 | A vulnerability in the normalization functionality of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: All versions, or not specified |
| CVE-2019-1978 | 5.8 | Nov 5 | A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: All versions, or not specified |
| CVE-2019-1691 | 5.8 | Feb 21 | Cisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability Affected: before 6.2.3.4 |
| CVE-2018-0297 | 5.8 | May 17 | A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer… Affected: 6.0.0; 6.1.0; 6.2.0; 6.2.2 |
| CVE-2018-0244 | 5.8 | Apr 19 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy to drop the… Affected: before 6.2.3 |
| CVE-2018-0243 | 5.8 | Apr 19 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy that is… Affected: before 6.2.3 |
| CVE-2026-20024 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20020 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2020-3352 | 5.5 | Oct 21 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access hidden commands Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2023-20031 | 5.4 | Nov 1 | A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; +9 more |
| CVE-2026-20106 | 5.3 | Mar 4 | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat… Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2021-34753 | 5.3 | Nov 15 | A vulnerability in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 6.4.0.13; 6.5.0 before 6.6.5.1; 6.7.0 before 6.7.0.3; 7.0.0 |
| CVE-2024-20493 | 5.3 | Oct 23 | A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20388 | 5.3 | Oct 23 | A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on… Affected: 6.4.0.4; 6.4.0.10; 6.4.0.12; 6.4.0.14; 6.4.0.16; 6.4.0.18; +7 more |
| CVE-2023-20267 | 5.3 | Nov 1 | A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions Affected: 6.7.0 through 7.3.1.1 |
| CVE-2023-20246 | 5.3 | Nov 1 | Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on… Affected: 7.0.0 through 7.3.1.1 |
| CVE-2022-20950 | 5.3 | Nov 15 | A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3… Affected: 7.2.0; 7.2.0.1 |
| CVE-2022-20940 | 5.3 | Nov 15 | A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain access to sensitive information Affected: 6.2.3 through 6.2.3.18; 6.3.0 through 6.3.0.5; 6.4.0 through 6.4.0.14; 6.5.0 through 6.5.0.5; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.3; +11 more |
| CVE-2022-20748 | 5.3 | May 3 | A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service… Affected: 7.0.0 |
| CVE-2021-34794 | 5.3 | Oct 27 | A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Affected: 6.4.0 before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.1 |
| CVE-2021-34791 | 5.3 | Oct 27 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: before 6.4.0.12; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.2 |
| CVE-2021-34790 | 5.3 | Oct 27 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: before 6.4.0.12; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.2 |
| CVE-2021-34787 | 5.3 | Oct 27 | A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-1495 | 5.3 | Apr 29 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: before 6.4.0.12; 6.5.0 before 6.6.4; 6.7.0 before 6.7.0.2 |
| CVE-2021-1236 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured… Affected: before 6.5.0.5 |
| CVE-2021-1224 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated,… Affected: before 6.7.0 |