CA
Product
Cisco Adaptive Security Appliance (ASA) Software
On CISA KEVExploited in the wildRansomware-linked
51
CVEs
7
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 22Medium 26Low 0
Watch
Add Cisco Adaptive Security Appliance (ASA) Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20269 RansomwareIn wildKEV | 9.1 | Sep 6 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20353 In wildKEV | 8.6 | Apr 24 | Cisco ASA and FTD Denial of Service Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2020-3452 In wildKEV | 7.5 | Jul 22 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability Affected: before 9.6.4.42; before 9.8.4.20; before 9.9.2.74; before 9.10.1.42; before 9.13.1.10; before 9.14.1.10 |
| CVE-2020-3259 RansomwareIn wildKEV | 7.5 | May 6 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2020-3580 RansomwareIn wildKEV | 6.1 | Oct 21 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities Affected: All versions, or not specified |
| CVE-2024-20359 In wildKEV | 6.0 | Apr 24 | Cisco ASA and FTD Privilege Escalation Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20481 In wildKEV | 5.8 | Oct 23 | Cisco ASA and FTD Denial-of-Service Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20329 | 9.9 | Oct 23 | Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.18.1; 9.18.1.3; +21 more |
| CVE-2025-20363 | 9.0 | Sep 25 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2025-20263 | 8.6 | Aug 14 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2025-20253 | 8.6 | Aug 14 | Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2025-20243 | 8.6 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2025-20239 | 8.6 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2025-20136 | 8.6 | Aug 14 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2025-20133 | 8.6 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.12.2; 9.8.2.45; 9.8.4; +34 more |
| CVE-2025-20134 | 8.6 | Aug 14 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability Affected: 9.12.4.39; 9.12.4.40; 9.14.4.6; 9.14.4.7; 9.12.4.41; 9.12.4.47; +18 more |
| CVE-2025-20182 | 8.6 | May 7 | Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2020-27124 | 8.6 | Nov 18 | Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2024-20495 | 8.6 | Oct 23 | A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.4.12; 9.8.4.15; 9.8.4.17; 9.8.4.25; 9.8.4.20; 9.8.4.22; +34 more |
| CVE-2024-20494 | 8.6 | Oct 23 | A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.19.1; 9.19.1.5; 9.19.1.9; 9.19.1.12; 9.19.1.18; 9.19.1.22; +11 more |
| CVE-2024-20426 | 8.6 | Oct 23 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +27 more |
| CVE-2024-20402 | 8.6 | Oct 23 | A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2025-20251 | 8.5 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2025-20244 | 7.7 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2025-20127 | 7.7 | Aug 14 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service Vulnerability Affected: 9.20.1; 9.20.1.5; 9.20.2; 9.20.2.10; 9.20.2.21; 9.20.2.22; +4 more |
| CVE-2024-20408 | 7.7 | Oct 23 | A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20268 | 7.7 | Oct 23 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability Affected: 9.14.1; 9.14.1.10; 9.14.1.6; 9.14.1.15; 9.14.1.19; 9.14.1.30; +34 more |
| CVE-2022-20866 | 7.5 | Aug 10 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability Affected: All versions, or not specified |
| CVE-2024-20485 | 6.7 | Oct 23 | A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2021-1444 | 6.1 | Nov 18 | Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software Web Services Interface Cross-Site Scripting Vulnerability Affected: 9.4.2.6; 9.0.1.1; 9.0.1.2; 9.0.1.4; 9.0.2.12; 9.0.2.2; +22 more |
| CVE-2024-20382 | 6.1 | Oct 23 | A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20341 | 6.1 | Oct 23 | Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2022-20713 | 6.1 | Aug 10 | A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2025-20237 | 6.0 | Aug 14 | A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2025-20238 | 6.0 | Aug 14 | A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20370 | 6.0 | Oct 23 | A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.17.1.11; 9.17.1.13; +34 more |
| CVE-2024-20331 | 5.9 | Oct 23 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2025-20254 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2025-20252 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 9.8.4.15; 9.8.4.17; 9.8.4.25; 9.8.4.20; 9.8.4.22; 9.8.4.26; +34 more |
| CVE-2025-20225 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2025-20224 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20384 | 5.8 | Oct 23 | A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2024-20299 | 5.8 | Oct 23 | Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2024-20297 | 5.8 | Oct 23 | Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more |
| CVE-2024-20293 | 5.8 | May 22 | A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… Affected: 9.19.1; 9.19.1.5; 9.19.1.9; 9.19.1.12; 9.19.1.18; 9.19.1.22; +3 more |
| CVE-2024-20443 | 5.4 | Aug 7 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface Affected: All versions, or not specified |
| CVE-2025-20219 | 5.3 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Bypass Vulnerability Affected: 9.18.2; 9.18.2.5; 9.18.2.7; 9.19.1; 9.18.2.8; 9.18.3; +34 more |
| CVE-2024-20526 | 5.3 | Oct 23 | A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: 9.16.4.67; 9.16.4.70; 9.18.4.40; 9.20.3 |
| CVE-2024-20493 | 5.3 | Oct 23 | A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2024-20355 | 5.0 | May 22 | A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Affected: 9.8.2.28; 9.8.2.33; 9.8.2.35; 9.8.2.38; 9.8.3.8; 9.8.3.11; +34 more |