CA
Product
Cisco Adaptive Security Appliance (ASA) Software
by Cisco · last CVE Sep 25, 2025
On CISA KEVExploited in the wildRansomware-linked
60
CVEs
7
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 25Medium 32Low 0
Watch

Add Cisco Adaptive Security Appliance (ASA) Software to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-3580
RansomwareIn wildKEV
6.1
86%
Oct 21
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
Affected: All versions, or not specified
CVE-2024-20359
In wildKEV
6.0
19%
Apr 24
Cisco ASA and FTD Privilege Escalation Vulnerability
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20481
In wildKEV
5.8
16%
Oct 23
Cisco ASA and FTD Denial-of-Service Vulnerability
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20485
6.7
0%
Oct 23
A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2021-1444
6.1
0%
Nov 18
Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software Web Services Interface Cross-Site Scripting Vulnerability
Affected: 9.4.2.6; 9.0.1.1; 9.0.1.2; 9.0.1.4; 9.0.2.12; 9.0.2.2; +22 more
CVE-2024-20382
6.1
0%
Oct 23
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20341
6.1
0%
Oct 23
Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability
Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more
CVE-2023-20264
6.1
0%
Nov 1
A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA)…
Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +6 more
CVE-2022-20713
6.1
2%
Aug 10
A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2025-20237
6.0
0%
Aug 14
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2025-20238
6.0
0%
Aug 14
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20370
6.0
0%
Oct 23
A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.17.1.11; 9.17.1.13; +34 more
CVE-2023-20234
6.0
0%
Aug 23
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device,…
Affected: 9.8.2; 9.8.2.8; 9.8.2.14; 9.8.2.15; 9.8.2.17; 9.8.2.20; +34 more
CVE-2024-20331
5.9
1%
Oct 23
Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability
Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more
CVE-2025-20254
5.8
0%
Aug 14
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2025-20252
5.8
0%
Aug 14
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)…
Affected: 9.8.4.15; 9.8.4.17; 9.8.4.25; 9.8.4.20; 9.8.4.22; 9.8.4.26; +34 more
CVE-2025-20225
5.8
1%
Aug 14
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2025-20224
5.8
1%
Aug 14
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20384
5.8
0%
Oct 23
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2024-20299
5.8
0%
Oct 23
Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability
Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more
CVE-2024-20297
5.8
0%
Oct 23
Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability
Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more
CVE-2024-20293
5.8
0%
May 22
A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
Affected: 9.19.1; 9.19.1.5; 9.19.1.9; 9.19.1.12; 9.19.1.18; 9.19.1.22; +3 more
CVE-2023-20245
5.8
0%
Nov 1
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
Affected: 9.8.3.14; 9.8.3.16; 9.8.3.18; 9.8.3.21; 9.8.3.26; 9.8.3.29; +34 more
CVE-2023-20256
5.8
1%
Nov 1
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
Affected: 9.8.4.25; 9.8.4.22; 9.8.4.26; 9.8.4.29; 9.8.4.32; 9.8.4.33; +34 more
CVE-2024-20443
5.4
0%
Aug 7
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface
Affected: All versions, or not specified
CVE-2025-20219
5.3
0%
Aug 14
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Bypass Vulnerability
Affected: 9.18.2; 9.18.2.5; 9.18.2.7; 9.19.1; 9.18.2.8; 9.18.3; +34 more
CVE-2024-20526
5.3
0%
Oct 23
A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
Affected: 9.16.4.67; 9.16.4.70; 9.18.4.40; 9.20.3
CVE-2024-20493
5.3
1%
Oct 23
A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2024-20355
5.0
0%
May 22
A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower…
Affected: 9.8.2.28; 9.8.2.33; 9.8.2.35; 9.8.2.38; 9.8.3.8; 9.8.3.11; +34 more
CVE-2025-20135
4.3
0%
Aug 14
Cisco Adaptive Security Appliance and Firepower Threat Defense Software DHCP Denial of Service Vulnerability
Affected: 9.12.3; 9.8.3; 9.12.1; 9.8.1; 9.12.2; 9.8.2.45; +34 more
CVE-2023-20275
4.3
0%
Dec 12
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2023-20247
4.3
0%
Nov 1
A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
Showing 32