SF
Product
Secure Firewall Threat Defense
On CISA KEVExploited in the wildRansomware-linked
274
CVEs
11
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 138Medium 130Low 1
Watch
Add Secure Firewall Threat Defense to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3580 RansomwareIn wildKEV | 6.1 | Oct 21 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities Affected: before 6.4.0.12; 6.5.0 before 6.6.4; 6.7.0 before 6.7.0.2 |
| CVE-2024-20359 In wildKEV | 6.0 | Apr 24 | Cisco ASA and FTD Privilege Escalation Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20481 In wildKEV | 5.8 | Oct 23 | Cisco ASA and FTD Denial-of-Service Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2026-20025 | 6.8 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2026-20050 | 6.8 | Mar 4 | Cisco Secure Firewall Threat Defense Decryption Policy Denial of Service Vulnerability Affected: 7.1.0 before 7.2.11; 7.3.0 before 7.4.4; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2022-20826 | 6.8 | Nov 15 | A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat… Affected: 7.1.0.0; 7.2.0.0; 7.2.0.1 |
| CVE-2018-15399 | 6.8 | Oct 5 | A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.0 |
| CVE-2018-15390 | 6.8 | Oct 5 | A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to… Affected: 6.2.3.0 through 6.2.3.4 |
| CVE-2026-20016 | 6.7 | Mar 4 | A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute… Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2024-20485 | 6.7 | Oct 23 | A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20358 | 6.7 | Apr 24 | A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2022-20934 | 6.7 | Nov 15 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on… Affected: 6.1.0 through 6.1.0.7; 6.2.0 through 6.2.0.6; 6.2.2 through 6.2.2.5; 6.2.3 through 6.2.3.18; 6.3.0 through 6.3.0.5; 6.4.0 through 6.4.0.15; +18 more |
| CVE-2021-1488 | 6.7 | Apr 29 | A vulnerability in the upgrade process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 6.5.0 before 6.6.4; 6.7.0 before 6.7.0.2 |
| CVE-2021-1476 | 6.7 | Apr 29 | A vulnerability in the CLI of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to… Affected: 6.5.0 before 6.6.4; 6.7.0 before 6.7.0.2 |
| CVE-2020-3514 | 6.7 | Oct 21 | A vulnerability in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their Cisco… Affected: 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 |
| CVE-2020-3458 | 6.7 | Oct 21 | Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software for the Firepower 1000 Series… Affected: through 6.2.2; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 |
| CVE-2020-3253 | 6.7 | May 6 | A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected… Affected: before 6.5.0 |
| CVE-2020-3166 | 6.7 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS) Affected: 6.2.2 before 6.2.3.16; 6.3.0 before 6.5.0.3 |
| CVE-2019-12694 | 6.7 | Oct 2 | A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker with administrative privileges to… Affected: before 6.3.0.5; 6.4.0 before 6.4.0.4 |
| CVE-2026-20064 | 6.5 | Mar 4 | A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial… Affected: 6.2.3; 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20023 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20022 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2022-20927 | 6.5 | Nov 15 | A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote… Affected: 6.5.0 through 6.5.0.5; 6.7.0 through 6.7.0.3; 6.6.0; 6.6.0.1; 6.6.1; 6.6.3; +3 more |
| CVE-2022-20924 | 6.5 | Nov 15 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 6.6.0; 6.6.0.1; 6.6.1; 6.6.3; 6.6.4; 6.6.5; +18 more |
| CVE-2022-20922 | 6.5 | Nov 15 | Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.2.0; 7.2.0.1 |
| CVE-2021-40125 | 6.5 | Oct 27 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 6.4.0.13; 6.6.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2020-3578 | 6.5 | Oct 21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.4.0 before 6.4.0.10 |
| CVE-2019-12700 | 6.5 | Oct 2 | A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC)… Affected: through 6.1.0; 6.2.0 before 6.2.3.14; through 6.1.0; 6.2.0 before 6.2.2.5; 6.2.3 before 6.2.3.7 |
| CVE-2019-1695 | 6.5 | May 3 | A vulnerability in the detection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.1 before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2019-1693 | 6.5 | May 3 | A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote… Affected: 6.2.1 before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2026-20102 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability Affected: 7.0.0 before 7.0.9; 7.1.0 before 7.2.11; 7.4.0 before 7.4.3; 7.6.0 before 10.0.0 |
| CVE-2026-20070 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2024-20382 | 6.1 | Oct 23 | A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; 6.2.3.6; +34 more |
| CVE-2024-20341 | 6.1 | Oct 23 | A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20264 | 6.1 | Nov 1 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA)… Affected: 7.2.4 |
| CVE-2022-20713 | 6.1 | Aug 10 | A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2021-34764 | 6.1 | Oct 27 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS)… Affected: before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3 |
| CVE-2020-3583 | 6.1 | Oct 21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.4.0 before 6.4.0.10 |
| CVE-2020-3582 | 6.1 | Oct 21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.4.0 before 6.4.0.10 |
| CVE-2020-3581 | 6.1 | Oct 21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.4.0 before 6.4.0.10 |
| CVE-2019-12695 | 6.1 | Oct 2 | A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 6.2.3.15; 6.3.0 before 6.3.0.5; 6.4.0 before 6.4.0.6 |
| CVE-2026-20017 | 6.0 | Mar 4 | Cisco Secure FTD Software Authenticated Command Injection Vulnerability Affected: 6.4.0 through 6.4.0.18; 7.0.0 through 7.0.8.1; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.10; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.3; +3 more |
| CVE-2026-20008 | 6.0 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2021-34761 | 6.0 | Oct 27 | A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite or append arbitrary data to system files using… Affected: 6.4.0 before 6.4.0.13; 6.6.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-1256 | 6.0 | Apr 29 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite files on the file system of an affected… Affected: through 6.4.0; 6.6.0 before 6.6.4 |
| CVE-2024-20331 | 5.9 | Oct 23 | A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20081 | 5.9 | Mar 23 | A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2017-3887 | 5.9 | Apr 7 | A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to… Affected: 6.0.1; 6.1.0; 6.2.0 |
| CVE-2026-20073 | 5.8 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass Vulnerability Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20068 | 5.8 | Mar 4 | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability Affected: 7.2.4; 7.2.4.1; 7.2.5; 7.2.5.1; 7.2.5.2; 7.2.6; +22 more |