Adaptive Security Appliance (Cisco) - vulnerabilities (CVEs)

34 CVEs, 0 in the last 30 days, 622 known versions, newest CVE from 2024-11-18. Vendor: Cisco.

CVEs of Adaptive Security Appliance

CVE-2020-27124 - CVSS 8.6 (high), 2024-11-18: A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause the…
CVE-2024-20402 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2024-20384 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2024-20355 - CVSS 5 (medium), 2024-05-22: A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and…
CVE-2024-20293 - CVSS 5.8 (medium), 2024-05-22: A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2024-20358 - CVSS 6.7 (medium), 2024-04-24: A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat…
CVE-2023-20107 - CVSS 7.5 (high), 2023-03-23: A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance…
CVE-2022-20795 - CVSS 7.5 (high), 2022-04-21: A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2021-1573 - CVSS 8.6 (high), 2022-01-11: A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2021-40118 - CVSS 8.6 (high), 2021-10-27: A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2021-34790 - CVSS 5.3 (medium), 2021-10-27: Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA)…
CVE-2021-40117 - CVSS 8.6 (high), 2021-10-27: A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
CVE-2021-34787 - CVSS 5.3 (medium), 2021-10-27: A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2021-34793 - CVSS 8.6 (high), 2021-10-27: A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent…
CVE-2021-34791 - CVSS 5.3 (medium), 2021-10-27: Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA)…
CVE-2020-3599 - CVSS 6.1 (medium), 2020-10-21: A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to…
CVE-2020-3572 - CVSS 8.6 (high), 2020-10-21: A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2020-3564 - CVSS 5.8 (medium), 2020-10-21: A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
CVE-2020-3555 - CVSS 7.5 (high), 2020-10-21: A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2020-3554 - CVSS 8.6 (high), 2020-10-21: A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
CVE-2020-3561 - CVSS 4.7 (medium), 2020-10-21: A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2020-3528 - CVSS 8.6 (high), 2020-10-21: A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2020-3436 - CVSS 8.6 (high), 2020-10-21: A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3529 - CVSS 8.6 (high), 2020-10-21: A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2020-3304 - CVSS 8.6 (high), 2020-10-21: A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an…
CVE-2019-15992 - CVSS 7.2 (high), 2020-09-23: A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense…
CVE-2020-3306 - CVSS 7.5 (high), 2020-05-06: A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3305 - CVSS 7.5 (high), 2020-05-06: A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower…
CVE-2020-3303 - CVSS 7.5 (high), 2020-05-06: A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense…
CVE-2019-12698 - CVSS 7.5 (high), 2019-10-02: A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2019-12695 - CVSS 6.1 (medium), 2019-10-02: A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2019-12693 - CVSS 6.8 (medium), 2019-10-02: A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a…
CVE-2019-12678 - CVSS 8.6 (high), 2019-10-02: A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2019-12676 - CVSS 7.4 (high), 2019-10-02: A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense…
CVE-2019-12673 - CVSS 8.6 (high), 2019-10-02: A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2017-12265 - CVSS 6.1 (medium), 2017-10-05: A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to…
CVE-2014-0653 - CVSS 4.3 (medium), 2014-01-08: The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state…
CVE-2014-0655 - CVSS 4.3 (medium), 2014-01-08: The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a…
CVE-2013-6696 - CVSS 7.1 (high), 2013-12-02: Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to…
CVE-2013-3463 - CVSS 4.3 (medium), 2013-08-30: The protocol-inspection feature on Cisco Adaptive Security Appliances (ASA) devices does not properly implement the idle timeout, which allows remote…
CVE-2013-3414 - CVSS 4.3 (medium), 2013-07-25: Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject…
CVE-2013-3382 - CVSS 7.8 (high), 2013-06-26: The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive Security…
CVE-2013-1199 - CVSS 4.9 (medium), 2013-04-18: Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices…
CVE-2013-1194 - CVSS 5 (medium), 2013-04-18: The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on…
CVE-2012-5415 - CVSS 5.4 (medium), 2013-04-16: Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by…
CVE-2013-1152 - CVSS 7.8 (high), 2013-04-11: Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a…
CVE-2013-1150 - CVSS 7.8 (high), 2013-04-11: The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and…
CVE-2013-1138 - CVSS 5 (medium), 2013-02-25: The NAT process on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (connections-table memory…
CVE-2012-6395 - CVSS 6.3 (medium), 2013-01-18: Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows…
CVE-2012-5717 - CVSS 6.3 (medium), 2013-01-18: Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote authenticated users…
CVE-2011-0396 - CVSS 7.8 (high), 2011-02-25: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before…
CVE-2011-0395 - CVSS 7.8 (high), 2011-02-25: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before…
CVE-2011-0394 - CVSS 7.8 (high), 2011-02-25: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before…
CVE-2010-2814 - CVSS 7.8 (high), 2010-08-09: Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software…
CVE-2010-2817 - CVSS 7.8 (high), 2010-08-09: Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1…
CVE-2010-2816 - CVSS 7.8 (high), 2010-08-09: Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17),…
CVE-2010-2815 - CVSS 7.8 (high), 2010-08-09: Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software…
CVE-2010-1578 - CVSS 7.8 (high), 2010-08-09: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5),…
CVE-2010-1581 - CVSS 7.8 (high), 2010-08-09: Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software…
CVE-2010-1580 - CVSS 7.8 (high), 2010-08-09: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5),…
CVE-2010-1579 - CVSS 7.8 (high), 2010-08-09: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5),…
CVE-2009-2631 - CVSS 6.8 (medium), 2009-12-04: Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN;…
CVE-2009-1201 - CVSS 4.3 (medium), 2009-06-25: Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software…
CVE-2009-1203 - CVSS 6 (medium), 2009-06-25: WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from…
CVE-2009-1202 - CVSS 4.3 (medium), 2009-06-25: WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection…
CVE-2009-1220 - CVSS 4.3 (medium), 2009-04-01: Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and…
CVE-2008-2056 - CVSS 7.8 (high), 2008-06-04: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1 allows remote attackers to cause a…
CVE-2007-5569 - CVSS 7.1 (high), 2007-10-18: Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service…
CVE-2006-4312 - CVSS 6.8 (medium), 2006-08-23: Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and…