Cisco Firepower Threat Defense Software vulnerabilities

46 known vulnerabilities in Cisco Firepower Threat Defense Software from Cisco. 44 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Allocation of Resources Without Limits or Throttling

  CVE-2022-20767May 3, 2022CiscoEPSS 1.69%

  A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper hand

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Allocation of Resources Without Limits or Throttling

  CVE-2022-20757May 3, 2022CiscoEPSS 1.26%

  A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traff

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Allocation of Resources Without Limits or Throttling

  CVE-2022-20751May 3, 2022CiscoEPSS 1.36%

  A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service (DoS) condition on an aff

• 7.5 High severity

  Cisco Firepower Threat Defense Software: NULL Pointer Dereference

  CVE-2022-20746May 3, 2022CiscoEPSS 1.36%

  A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An atta

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Improper Handling of Unexpected Data Type

  CVE-2022-20730May 3, 2022Cisco

  A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processi

• 7.8 High severity

  Cisco Firepower Threat Defense Software: XML Injection

  CVE-2022-20729May 3, 2022Cisco

  A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability