SF
Product
Secure Firewall Threat Defense
On CISA KEVExploited in the wildRansomware-linked
274
CVEs
11
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 138Medium 130Low 1
Watch
Add Secure Firewall Threat Defense to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3564 | 5.3 | Oct 21 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2020-3315 | 5.3 | May 6 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured file policies… Affected: before 6.6.0 |
| CVE-2020-3188 | 5.3 | May 6 | A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a… Affected: 6.4.0 before 6.4.0.9; 6.5.0 before 6.5.0.5 |
| CVE-2020-3186 | 5.3 | May 6 | A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured… Affected: 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.7; 6.5.0 before 6.5.0.2 |
| CVE-2019-1982 | 5.3 | Nov 5 | A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management… Affected: All versions, or not specified |
| CVE-2019-1980 | 5.3 | Nov 5 | A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center… Affected: All versions, or not specified |
| CVE-2018-0254 | 5.3 | Apr 19 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an… Affected: 6.1.0.5; 6.2.0.2; 6.2.1; 6.2.2 |
| CVE-2018-0138 | 5.3 | Feb 8 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block… Affected: 6.1.0; 6.2.0; 6.2.2; 6.2.3 |
| CVE-2017-3822 | 5.3 | Feb 3 | A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add… Affected: 6.1.0 |
| CVE-2017-3806 | 5.3 | Feb 3 | A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated,… Affected: 5.3.0; 5.4.0; 6.0.0; 6.0.1; 6.1.0 |
| CVE-2024-20355 | 5.0 | May 22 | A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2022-20949 | 4.9 | Nov 15 | A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute… Affected: 6.1.0 through 6.1.0.7; 6.2.0 through 6.2.0.6; 6.2.2 through 6.2.2.5; 6.2.3 through 6.2.3.18; 6.3.0 through 6.3.0.5; 6.4.0 through 6.4.0.15; +10 more |
| CVE-2020-3308 | 4.9 | May 6 | A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level… Affected: before 6.2.2.1 |
| CVE-2021-34763 | 4.8 | Oct 27 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS)… Affected: before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3 |
| CVE-2019-1701 | 4.8 | May 3 | Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated,… Affected: 6.2.1 before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2020-3561 | 4.7 | Oct 21 | A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2026-20021 | 4.3 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20069 | 4.3 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2023-20275 | 4.3 | Dec 12 | A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20247 | 4.3 | Nov 1 | A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20070 | 4.0 | Nov 1 | A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection… Affected: 7.2.0; 7.2.0.1 |
| CVE-2023-20177 | 4.0 | Nov 1 | A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +15 more |
| CVE-2018-15398 | 4.0 | Oct 5 | A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.0 |
| CVE-2020-3585 | 3.7 | Oct 21 | A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000 Series firewalls… Affected: before 6.4.0.10 |