Advisories · Technology
Cisco Adaptive Security Appliance (ASA) Software.
Every CVE that names Cisco Adaptive Security Appliance (ASA) Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 7.4 HighCritical · CVSS 7+ and EPSS
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Information disclosure
- CVSS 4.3 Medium
HTTP request smuggling in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- HTTP request smuggling
- CVSS 9.1 CriticalCritical · CVSS 9+
Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-345
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-399
- CVSS 8.5 High
Cisco Adaptive Security Appliance Software Clientless SSL VPN Heap Overflow Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 7.4 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-325
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Privilege escalation
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-20
- CVSS 5.8 Medium
Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-345
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 5.3 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Broken access control
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-924
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 4.7 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-358
- CVSS 4.7 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-358
- CVSS 5.3 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-183
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 8.6 High
Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 5.3 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 7.7 High
Cisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Code injection
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Authentication bypass
- CVSS 8.5 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 6.7 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000 and 2100 Series Appliances Command Injection Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Command injection
- CVSS 6.7 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Command Injection Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Command injection
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 6.8 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 4.7 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Other injection
- CVSS 5.8 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Broken access control
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 5.3 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Broken access control
- CVSS 6.1 MediumCritical · KEVKEV · ransomware
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Information disclosure
- CVSS 6.1 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- Cross-site scripting (XSS)
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Unrestricted file upload
- CVSS 8.8 High
Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cross-site request forgery (CSRF)
- CVSS 6.7 Medium
Cisco FXOS Software Command Injection Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Command injection
- CVSS 6.7 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-693
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 7.2 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Code Execution Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-20
- CVSS 6.8 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 6.8 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 6.8 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-399
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Information disclosure
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service