Cisco Firepower Threat Defense Software (Cisco) - vulnerabilities (CVEs)

160 CVEs, 0 in the last 30 days, 101 known versions, newest CVE from 2025-09-25. Vendor: Cisco.

CVEs of Cisco Firepower Threat Defense Software

CVE-2025-20363 - CVSS 9 (critical), 2025-09-25: A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software,…
CVE-2025-20263 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…
CVE-2025-20254 - CVSS 5.8 (medium), 2025-08-14: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…
CVE-2025-20268 - CVSS 5.8 (medium), 2025-08-14: A vulnerability in the Geolocation-Based Remote Access (RA) VPN feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated,…
CVE-2025-20252 - CVSS 5.8 (medium), 2025-08-14: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…
CVE-2025-20251 - CVSS 8.5 (high), 2025-08-14: A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat…
CVE-2025-20244 - CVSS 7.7 (high), 2025-08-14: A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat…
CVE-2025-20253 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an…
CVE-2025-20243 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote…
CVE-2025-20239 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance…
CVE-2025-20238 - CVSS 6 (medium), 2025-08-14: A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2025-20237 - CVSS 6 (medium), 2025-08-14: A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2025-20220 - CVSS 6 (medium), 2025-08-14: A vulnerability in the CLI of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2025-20225 - CVSS 5.8 (medium), 2025-08-14: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance…
CVE-2025-20224 - CVSS 5.8 (medium), 2025-08-14: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…
CVE-2025-20222 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure…
CVE-2025-20136 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation (NAT) DNS inspection for Cisco Secure Firewall Adaptive Security…
CVE-2025-20219 - CVSS 5.3 (medium), 2025-08-14: A vulnerability in the implementation of access control rules for loopback interfaces in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and…
CVE-2025-20217 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2025-20133 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall ASA Software and Secure FTD Software could…
CVE-2025-20135 - CVSS 4.3 (medium), 2025-08-14: A vulnerability in the DHCP client functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…
CVE-2025-20134 - CVSS 8.6 (high), 2025-08-14: A vulnerability in the certificate processing of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…
CVE-2025-20127 - CVSS 7.7 (high), 2025-08-14: A vulnerability in the TLS 1.3 implementation for a specific cipher for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure…
CVE-2025-20182 - CVSS 8.6 (high), 2025-05-07: A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat…
CVE-2021-34752 - CVSS 6.7 (medium), 2024-11-15: A vulnerability in the CLI of Cisco FTD Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary…
CVE-2021-34753 - CVSS 5.8 (medium), 2024-11-15: A vulnerability in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2021-1494 - CVSS 5.8 (medium), 2024-11-15: Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a…
CVE-2022-20685 - CVSS 7.5 (high), 2024-11-15: A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2024-20495 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2024-20485 - CVSS 6.7 (medium), 2024-10-23: A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2024-20494 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2024-20493 - CVSS 5.3 (medium), 2024-10-23: A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
CVE-2024-20481 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2024-20426 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
CVE-2024-20431 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2024-20412 - CVSS 9.3 (critical), 2024-10-23: A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local…
CVE-2024-20407 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could…
CVE-2024-20408 - CVSS 7.7 (high), 2024-10-23: A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2024-20402 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2024-20388 - CVSS 5.3 (medium), 2024-10-23: A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to…
CVE-2024-20384 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2024-20382 - CVSS 6.1 (medium), 2024-10-23: A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2024-20370 - CVSS 6 (medium), 2024-10-23: A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2024-20342 - CVSS 8.6 (high), 2024-10-23: Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated,…
CVE-2024-20341 - CVSS 6.1 (medium), 2024-10-23: A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2024-20339 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the TLS processing feature of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series could allow an unauthenticated,…
CVE-2024-20351 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER…
CVE-2024-20331 - CVSS 6.8 (medium), 2024-10-23: A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
CVE-2024-20330 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series…
CVE-2024-20299 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
CVE-2024-20297 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
CVE-2024-20268 - CVSS 7.7 (high), 2024-10-23: A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2024-20361 - CVSS 5.8 (medium), 2024-05-22: A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an…
CVE-2024-20355 - CVSS 5 (medium), 2024-05-22: A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and…
CVE-2024-20293 - CVSS 5.8 (medium), 2024-05-22: A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2024-20363 - CVSS 5.8 (medium), 2024-05-22: Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote…
CVE-2024-20261 - CVSS 5.8 (medium), 2024-05-22: A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2024-20359 - CVSS 6 (medium), 2024-04-24: A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security…
CVE-2024-20353 - CVSS 8.6 (high), 2024-04-24: A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2023-20275 - CVSS 4.3 (medium), 2023-12-12: A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-20071 - CVSS 5.8 (medium), 2023-11-01: Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the…
CVE-2023-20246 - CVSS 5.8 (medium), 2023-11-01: Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the…
CVE-2023-20267 - CVSS 5.3 (medium), 2023-11-01: A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This…
CVE-2023-20070 - CVSS 4 (medium), 2023-11-01: A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…
CVE-2023-20095 - CVSS 8.6 (high), 2023-11-01: A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-20264 - CVSS 6.1 (medium), 2023-11-01: A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security…
CVE-2023-20083 - CVSS 8.6 (high), 2023-11-01: A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2023-20247 - CVSS 5 (medium), 2023-11-01: A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2023-20042 - CVSS 8.6 (high), 2023-11-01: A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-20031 - CVSS 5.4 (medium), 2023-11-01: A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2023-20063 - CVSS 8.2 (high), 2023-11-01: A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that…
CVE-2023-20086 - CVSS 8.6 (high), 2023-11-01: A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2023-20245 - CVSS 5.8 (medium), 2023-11-01: Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2023-20244 - CVSS 8.6 (high), 2023-11-01: A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an…
CVE-2023-20270 - CVSS 5.8 (medium), 2023-11-01: A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat…
CVE-2023-20177 - CVSS 4 (medium), 2023-11-01: A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured…
CVE-2023-20256 - CVSS 5.8 (medium), 2023-11-01: Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2023-20269 - CVSS 9.1 (critical), 2023-09-06: A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-20234 - CVSS 6 (medium), 2023-08-23: A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an…
CVE-2023-20006 - CVSS 8.6 (high), 2023-06-28: A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2022-20950 - CVSS 5.8 (medium), 2022-11-15: A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2022-20947 - CVSS 8.6 (high), 2022-11-15: A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software…
CVE-2022-20946 - CVSS 8.6 (high), 2022-11-15: A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2022-20943 - CVSS 5.8 (medium), 2022-11-15: Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an…
CVE-2022-20949 - CVSS 6.5 (medium), 2022-11-15: A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high…
CVE-2022-20940 - CVSS 5.3 (medium), 2022-11-15: A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain access to…
CVE-2022-20934 - CVSS 6.7 (medium), 2022-11-15: A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute…
CVE-2022-20928 - CVSS 5.8 (medium), 2022-11-15: A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat…
CVE-2022-20927 - CVSS 7.7 (high), 2022-11-15: A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2022-20924 - CVSS 7.7 (high), 2022-11-15: A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2022-20922 - CVSS 6.5 (medium), 2022-11-15: Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an…
CVE-2022-20854 - CVSS 7.5 (high), 2022-11-15: A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow…
CVE-2022-20826 - CVSS 6.8 (medium), 2022-11-15: A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or…
CVE-2022-20713 - CVSS 6.1 (medium), 2022-08-10: A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2022-20746 - CVSS 8.6 (high), 2022-05-03: A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a…
CVE-2022-20757 - CVSS 8.6 (high), 2022-05-03: A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…
CVE-2022-20730 - CVSS 7.5 (high), 2022-05-03: A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2022-20751 - CVSS 8.6 (high), 2022-05-03: A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2022-20729 - CVSS 7.8 (high), 2022-05-03: A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser.…
CVE-2022-20748 - CVSS 5.3 (medium), 2022-05-03: A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…