# Cisco Firepower Threat Defense Software. Every CVE that names Cisco Firepower Threat Defense Software among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Infinite loop in Cisco Firepower Threat Defense Software](https://agentprime.io/advisories/CVE-2023-20083.md) `CVE-2023-20083` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 1 Nov 2023 · Tags: Denial of service - [Improper access control in Cisco Firepower Threat Defense Software](https://agentprime.io/advisories/CVE-2023-20267.md) `CVE-2023-20267` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Broken access control - [Authentication bypass in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20247.md) `CVE-2023-20247` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Authentication bypass - [Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20095.md) `CVE-2023-20095` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 1 Nov 2023 · Tags: Denial of service - [Authentication bypass by spoofing in Cisco Firepower Threat Defense Software and others](https://agentprime.io/advisories/CVE-2023-20246.md) `CVE-2023-20246` · CVE record: Cisco Cisco Firepower Threat Defense Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Authentication bypass - [Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability](https://agentprime.io/advisories/CVE-2023-20063.md) `CVE-2023-20063` · CVE record: Cisco Cisco Firepower Management Center and 1 more · CVSS 8.2 High · Not analysed yet · Published 1 Nov 2023 · Tags: Code injection - [Improper resource shutdown in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20042.md) `CVE-2023-20042` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Denial of service - [Open redirect in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20264.md) `CVE-2023-20264` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Open redirect - [A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedl…](https://agentprime.io/advisories/CVE-2023-20070.md) `CVE-2023-20070` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-244 - [Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system.](https://agentprime.io/advisories/CVE-2023-20071.md) `CVE-2023-20071` · CVE record: Cisco Cisco Firepower Threat Defense Software and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-1039 - [A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…](https://agentprime.io/advisories/CVE-2023-20031.md) `CVE-2023-20031` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-244 - [Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20245.md) `CVE-2023-20245` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Authentication bypass - [Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20256.md) `CVE-2023-20256` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Authentication bypass - [Improper input validation in Cisco Firepower Threat Defense Software](https://agentprime.io/advisories/CVE-2023-20270.md) `CVE-2023-20270` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-20 - [A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a…](https://agentprime.io/advisories/CVE-2023-20244.md) `CVE-2023-20244` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-771 - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software…](https://agentprime.io/advisories/CVE-2023-20086.md) `CVE-2023-20086` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-248 - [A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detect…](https://agentprime.io/advisories/CVE-2023-20177.md) `CVE-2023-20177` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-244 - [Authentication bypass in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20269.md) `CVE-2023-20269` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.0 Medium · Critical (KEV) · In CISA KEV, ransomware · EPSS 0.27 · Not analysed yet · Published 6 Sept 2023 · Tags: Authentication bypass - [External control of a file path in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20234.md) `CVE-2023-20234` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 2 more · CVSS 4.4 Medium · Not analysed yet · Published 23 Aug 2023 · Tags: Path traversal - [Incorrect numeric conversion in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20006.md) `CVE-2023-20006` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 28 Jun 2023 · Tags: CWE-681 - [Observable discrepancy in Cisco Firepower Threat Defense Software](https://agentprime.io/advisories/CVE-2022-20940.md) `CVE-2022-20940` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.3 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: Information disclosure - [Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the…](https://agentprime.io/advisories/CVE-2022-20943.md) `CVE-2022-20943` · CVE record: Cisco Cisco Firepower Threat Defense Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-244 - [Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the…](https://agentprime.io/advisories/CVE-2022-20922.md) `CVE-2022-20922` · CVE record: Cisco Cisco Firepower Threat Defense Software and 2 more · CVSS 5.8 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-244 - [Incorrect authorization in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2022-20928.md) `CVE-2022-20928` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 2 more · CVSS 5.8 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: Broken access control - [Command injection in Cisco Firepower Threat Defense Software and others](https://agentprime.io/advisories/CVE-2022-20934.md) `CVE-2022-20934` · CVE record: Cisco Cisco Firepower Threat Defense Software and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: Command injection - [Resource allocation without limits in Cisco Firepower Threat Defense Software](https://agentprime.io/advisories/CVE-2022-20950.md) `CVE-2022-20950` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: Denial of service - [A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on a…](https://agentprime.io/advisories/CVE-2022-20949.md) `CVE-2022-20949` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-399 - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series…](https://agentprime.io/advisories/CVE-2022-20826.md) `CVE-2022-20826` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-501 - [Uncontrolled resource consumption in Cisco Firepower Management Center and others](https://agentprime.io/advisories/CVE-2022-20854.md) `CVE-2022-20854` · CVE record: Cisco Cisco Firepower Management Center and 1 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2022 · Tags: Denial of service - [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco…](https://agentprime.io/advisories/CVE-2022-20924.md) `CVE-2022-20924` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 7.7 High · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-703 - [Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2022-20927.md) `CVE-2022-20927` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 2 more · CVSS 7.7 High · Not analysed yet · Published 10 Nov 2022 · Tags: Memory corruption - [Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2022-20947.md) `CVE-2022-20947` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 10 Nov 2022 · Tags: Memory corruption - [Heap-based buffer overflow in Cisco Firepower Threat Defense Software](https://agentprime.io/advisories/CVE-2022-20946.md) `CVE-2022-20946` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 10 Nov 2022 · Tags: Memory corruption - [HTTP request smuggling in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2022-20713.md) `CVE-2022-20713` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Aug 2022 · Tags: HTTP request smuggling - [Cisco Firepower Threat Defense Software XML Injection Vulnerability](https://agentprime.io/advisories/CVE-2022-20729.md) `CVE-2022-20729` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.4 Medium · Not analysed yet · Published 3 May 2022 · Tags: Other injection - [Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-20730.md) `CVE-2022-20730` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 3 May 2022 · Tags: CWE-241 - [Cisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20767.md) `CVE-2022-20767` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 3 May 2022 · Tags: CWE-399 - [Cisco Firepower Threat Defense Software Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20757.md) `CVE-2022-20757` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 3 May 2022 · Tags: Denial of service - [Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20751.md) `CVE-2022-20751` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 3 May 2022 · Tags: Denial of service - [Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20748.md) `CVE-2022-20748` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2022 · Tags: CWE-664 - [Cisco Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20746.md) `CVE-2022-20746` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 3 May 2022 · Tags: Memory corruption - [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1573.md) `CVE-2021-1573` · CVE record: Cisco Cisco Adaptive Security Appliance Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 11 Jan 2022 · Tags: Memory corruption - [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-34704.md) `CVE-2021-34704` · CVE record: Cisco Cisco Adaptive Security Appliance Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 11 Jan 2022 · Tags: Memory corruption - [Multiple Cisco Products Snort Rule Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-40116.md) `CVE-2021-40116` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 27 Oct 2021 · Tags: CWE-241 - [Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-40114.md) `CVE-2021-40114` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 6.8 Medium · Not analysed yet · Published 27 Oct 2021 · Tags: Denial of service - [Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability](https://agentprime.io/advisories/CVE-2021-34761.md) `CVE-2021-34761` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.4 Medium · Not analysed yet · Published 27 Oct 2021 · Tags: Path traversal - [Cisco Firepower Threat Defense Software Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34756.md) `CVE-2021-34756` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 6.7 Medium · Not analysed yet · Published 27 Oct 2021 · Tags: CWE-20 - [Cisco Firepower Threat Defense Software Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34755.md) `CVE-2021-34755` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 6.7 Medium · Not analysed yet · Published 27 Oct 2021 · Tags: CWE-20 - [Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34754.md) `CVE-2021-34754` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 27 Oct 2021 · Tags: Broken access control - [Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-1518.md) `CVE-2021-1518` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 6.3 Medium · Not analysed yet · Published 22 Jul 2021 · Tags: Code injection - [Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1495.md) `CVE-2021-1495` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 29 Apr 2021 - [Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1489.md) `CVE-2021-1489` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.9 Medium · Not analysed yet · Published 29 Apr 2021 · Tags: Denial of service - [Cisco Firepower Threat Defense Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1448.md) `CVE-2021-1448` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 7.8 High · Not analysed yet · Published 29 Apr 2021 · Tags: CWE-20 - [Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability](https://agentprime.io/advisories/CVE-2021-1369.md) `CVE-2021-1369` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.4 Medium · Not analysed yet · Published 29 Apr 2021 · Tags: XML external entities (XXE) - [Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2021-1256.md) `CVE-2021-1256` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 6.0 Medium · Not analysed yet · Published 29 Apr 2021 · Tags: Information disclosure - [Cisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1402.md) `CVE-2021-1402` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 29 Apr 2021 · Tags: Memory corruption - [Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1236.md) `CVE-2021-1236` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-670 - [Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1224.md) `CVE-2021-1224` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-693 - [Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1223.md) `CVE-2021-1223` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-693 - [Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3562.md) `CVE-2020-3562` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 8.6 High · Not analysed yet · Published 21 Oct 2020 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .