# Cisco Firepower Threat Defense Software. Every CVE that names Cisco Firepower Threat Defense Software among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Heap-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20363.md) `CVE-2025-20363` · CVE record: Cisco IOS and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [OS command injection in Cisco Firepower Management Center and others](https://agentprime.io/advisories/CVE-2025-20220.md) `CVE-2025-20220` · CVE record: Cisco Cisco Firepower Management Center and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Command injection - [Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20268.md) `CVE-2025-20268` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-229 - [Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2025-20254.md) `CVE-2025-20254` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20263.md) `CVE-2025-20263` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Memory corruption - [Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20253.md) `CVE-2025-20253` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2025-20252.md) `CVE-2025-20252` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion](https://agentprime.io/advisories/CVE-2025-20251.md) `CVE-2025-20251` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1287 - [Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20244.md) `CVE-2025-20244` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 7.7 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1287 - [Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20243.md) `CVE-2025-20243` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Memory leak in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20239.md) `CVE-2025-20239` · CVE record: Cisco IOS and 3 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb…](https://agentprime.io/advisories/CVE-2025-20237.md) `CVE-2025-20237` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-146 - [A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb…](https://agentprime.io/advisories/CVE-2025-20238.md) `CVE-2025-20238` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1244 - [Memory leak in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20225.md) `CVE-2025-20225` · CVE record: Cisco IOS and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2025-20224.md) `CVE-2025-20224` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer Vulnerability](https://agentprime.io/advisories/CVE-2025-20222.md) `CVE-2025-20222` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Memory corruption - [Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20219.md) `CVE-2025-20219` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Broken access control - [Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20217.md) `CVE-2025-20217` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20136.md) `CVE-2025-20136` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cisco Adaptive Security Appliance and Firepower Threat Defense Software DHCP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20135.md) `CVE-2025-20135` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20127.md) `CVE-2025-20127` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 7.7 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20133.md) `CVE-2025-20133` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20134.md) `CVE-2025-20134` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Memory corruption - [Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20182.md) `CVE-2025-20182` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [Protection mechanism failure in Cisco Firepower Threat Defense Software and others](https://agentprime.io/advisories/CVE-2021-1494.md) `CVE-2021-1494` · CVE record: Cisco Cisco Firepower Threat Defense Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-693 - [Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34753.md) `CVE-2021-34753` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Broken access control - [Cisco Firepower Threat Defense Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34752.md) `CVE-2021-34752` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 6.7 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-20 - [Multiple Cisco Products Snort Modbus Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20685.md) `CVE-2022-20685` · CVE record: Cisco Cisco Cyber Vision and 2 more · CVSS 7.5 High · Not analysed yet · Published 15 Nov 2024 · Tags: Memory corruption - [Improper input validation in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20495.md) `CVE-2024-20495` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-20 - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security…](https://agentprime.io/advisories/CVE-2024-20494.md) `CVE-2024-20494` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-1287 - [Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20493.md) `CVE-2024-20493` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Denial of service - [Code injection in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20485.md) `CVE-2024-20485` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Code injection - [Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20481.md) `CVE-2024-20481` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Critical (KEV) · In CISA KEV · EPSS 0.16 · Not analysed yet · Published 23 Oct 2024 · Tags: Denial of service - [A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy.](https://agentprime.io/advisories/CVE-2024-20431.md) `CVE-2024-20431` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-229 - [NULL pointer dereference in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20426.md) `CVE-2024-20426` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2024 · Tags: Memory corruption - [Hard-coded password in Cisco Firepower Threat Defense Software](https://agentprime.io/advisories/CVE-2024-20412.md) `CVE-2024-20412` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2024 · Tags: Hard-coded credentials - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security…](https://agentprime.io/advisories/CVE-2024-20408.md) `CVE-2024-20408` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 7.7 High · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-1287 - [A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…](https://agentprime.io/advisories/CVE-2024-20407.md) `CVE-2024-20407` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-399 - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA)…](https://agentprime.io/advisories/CVE-2024-20402.md) `CVE-2024-20402` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2024 · Tags: Memory corruption - [Cisco Firepower Management Center: A vulnerability in the password change feature of Cisco Firepower Management Center (FMC)…](https://agentprime.io/advisories/CVE-2024-20388.md) `CVE-2024-20388` · CVE record: Cisco Cisco Firepower Management Center and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-202 - [Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20384.md) `CVE-2024-20384` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Authentication bypass - [Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20382.md) `CVE-2024-20382` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco…](https://agentprime.io/advisories/CVE-2024-20370.md) `CVE-2024-20370` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-264 - [Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20351.md) `CVE-2024-20351` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2024 · Tags: Denial of service - [Cisco Firepower Threat Defense Software Rate Filter Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20342.md) `CVE-2024-20342` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-1025 - [Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2024-20341.md) `CVE-2024-20341` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20339.md) `CVE-2024-20339` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2024 · Tags: Memory corruption - [Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability](https://agentprime.io/advisories/CVE-2024-20331.md) `CVE-2024-20331` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Weak cryptography or TLS - [Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 and Snort 2 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20330.md) `CVE-2024-20330` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2024 · Tags: Memory corruption - [Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20299.md) `CVE-2024-20299` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Authentication bypass - [Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20297.md) `CVE-2024-20297` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Authentication bypass - [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20268.md) `CVE-2024-20268` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 7.7 High · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-231 - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive…](https://agentprime.io/advisories/CVE-2024-20293.md) `CVE-2024-20293` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 22 May 2024 · Tags: CWE-436 - [Missing authorization in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20355.md) `CVE-2024-20355` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 22 May 2024 · Tags: Broken access control - [Cisco Firepower Management Center: A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco…](https://agentprime.io/advisories/CVE-2024-20361.md) `CVE-2024-20361` · CVE record: Cisco Cisco Firepower Management Center and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 22 May 2024 · Tags: CWE-264 - [Improper access control in Cisco Firepower Threat Defense Software](https://agentprime.io/advisories/CVE-2024-20261.md) `CVE-2024-20261` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 22 May 2024 · Tags: Broken access control - [Authentication bypass by spoofing in Cisco Firepower Threat Defense Software and others](https://agentprime.io/advisories/CVE-2024-20363.md) `CVE-2024-20363` · CVE record: Cisco Cisco Firepower Threat Defense Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 22 May 2024 · Tags: Authentication bypass - [Code injection in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20359.md) `CVE-2024-20359` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.0 Medium · Critical (KEV) · In CISA KEV · EPSS 0.19 · Not analysed yet · Published 24 Apr 2024 · Tags: Code injection - [Infinite loop in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20353.md) `CVE-2024-20353` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.70 · Not analysed yet · Published 24 Apr 2024 · Tags: Denial of service - [Origin validation error in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20275.md) `CVE-2023-20275` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 4.1 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-346 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .