Adaptive Security Appliance Software vulnerabilities

48 known vulnerabilities in Adaptive Security Appliance Software from Cisco. 44 are rated high or critical, and 15 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco Adaptive Security Appliance (ASA) Software: Insufficient Verification of Data Authenticity

  CVE-2022-20795Apr 21, 2022Cisco

  A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization, resul

• 6.1 Medium severity

  Cisco ASA and FTD Cross-Site Scripting (XSS) Exploited

  CVE-2020-3580Oct 21, 2020CiscoEPSS 85.6%

  Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a

• 7.5 High severity

  Cisco ASA and FTD Read-Only Path Traversal Exploited

  CVE-2020-3452Jul 22, 2020CiscoEPSS 100%

  A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files

• 7.5 High severity

  Cisco ASA and FTD Information Disclosure Exploited

  CVE-2020-3259May 6, 2020CiscoEPSS 71.5%

  A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could l

• 7.5 High severity

  Cisco Adaptive Security Appliance (ASA) Denial-of-Service Exploited

  CVE-2018-0296Jun 7, 2018Cisco Adaptive Security Appliance unknownEPSS 99.9%

  A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on cer

• 7.8 High severity

  Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Exploited

  CVE-2016-6367Aug 18, 2016CiscoEPSS 22.6%

  Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

• 8.8 High severity

  Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Exploited

  CVE-2016-6366Aug 18, 2016CiscoEPSS 87.6%

  Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary

• 6.1 Medium severity

  Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Exploited

  CVE-2014-2120Mar 19, 2014CiscoEPSS 22.6%

  Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.