Secure Firewall Threat Defense (Cisco) - vulnerabilities (CVEs)

276 CVEs, 0 in the last 30 days, 327 known versions, newest CVE from 2026-08-11. Vendor: Cisco.

CVEs of Secure Firewall Threat Defense

CVE-2026-20349 - CVSS 8.6 (high), 2026-08-11: A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat…
CVE-2026-20012 - CVSS 8.6 (high), 2026-03-25: A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security…
CVE-2026-20064 - CVSS 6.5 (medium), 2026-03-04: A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly…
CVE-2026-20024 - CVSS 6.8 (medium), 2026-03-04: A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to…
CVE-2026-20025 - CVSS 6.8 (medium), 2026-03-04: A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to…
CVE-2026-20023 - CVSS 6.5 (medium), 2026-03-04: A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)…
CVE-2026-20021 - CVSS 4.3 (medium), 2026-03-04: A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)…
CVE-2026-20022 - CVSS 6.5 (medium), 2026-03-04: A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to…
CVE-2026-20020 - CVSS 6.8 (medium), 2026-03-04: A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to…
CVE-2026-20016 - CVSS 6.7 (medium), 2026-03-04: A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local…
CVE-2026-20106 - CVSS 5.3 (medium), 2026-03-04: A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and…
CVE-2026-20105 - CVSS 7.7 (high), 2026-03-04: A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat…
CVE-2026-20102 - CVSS 6.1 (medium), 2026-03-04: A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software…
CVE-2026-20101 - CVSS 8.6 (high), 2026-03-04: A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated,…
CVE-2026-20103 - CVSS 8.6 (high), 2026-03-04: A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat…
CVE-2026-20100 - CVSS 7.7 (high), 2026-03-04: A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure…
CVE-2026-20073 - CVSS 5.8 (medium), 2026-03-04: A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2026-20070 - CVSS 6.1 (medium), 2026-03-04: A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…
CVE-2026-20069 - CVSS 4.3 (medium), 2026-03-04: A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…
CVE-2026-20068 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the…
CVE-2026-20067 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the…
CVE-2026-20066 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the…
CVE-2026-20065 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the…
CVE-2026-20058 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3…
CVE-2026-20057 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated,…
CVE-2026-20053 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3…
CVE-2026-20052 - CVSS 5.8 (medium), 2026-03-04: A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2026-20050 - CVSS 6.8 (medium), 2026-03-04: A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2026-20054 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3…
CVE-2026-20049 - CVSS 7.7 (high), 2026-03-04: A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall…
CVE-2026-20039 - CVSS 8.6 (high), 2026-03-04: A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)…
CVE-2026-20017 - CVSS 6 (medium), 2026-03-04: A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating…
CVE-2026-20015 - CVSS 5.8 (medium), 2026-03-04: A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to…
CVE-2026-20014 - CVSS 7.7 (high), 2026-03-04: A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with…
CVE-2026-20013 - CVSS 5.8 (medium), 2026-03-04: A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to…
CVE-2026-20007 - CVSS 5.8 (medium), 2026-03-04: A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated,…
CVE-2026-20008 - CVSS 6 (medium), 2026-03-04: A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall…
CVE-2026-20006 - CVSS 5.8 (medium), 2026-03-04: A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2026-20005 - CVSS 5.8 (medium), 2026-03-04: Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the…
CVE-2025-20363 - CVSS 9 (critical), 2025-09-25: A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software,…
CVE-2025-20362 - CVSS 8.6 (high), 2025-09-25: Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software…
CVE-2025-20333 - CVSS 9.9 (critical), 2025-09-25: A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)…
CVE-2025-20224 - CVSS 5.8 (medium), 2025-08-14: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall…
CVE-2025-20127 - CVSS 7.7 (high), 2025-08-14: A vulnerability in the TLS 1.3 implementation for a specific cipher for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure…
CVE-2025-20182 - CVSS 8.6 (high), 2025-05-07: A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat…
CVE-2021-34753 - CVSS 5.8 (medium), 2024-11-15: A vulnerability in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2022-20685 - CVSS 7.5 (high), 2024-11-15: A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2024-20495 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2024-20494 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2024-20493 - CVSS 5.3 (medium), 2024-10-23: A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
CVE-2024-20485 - CVSS 6.7 (medium), 2024-10-23: A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2024-20481 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2024-20431 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2024-20426 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
CVE-2024-20412 - CVSS 9.3 (critical), 2024-10-23: A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local…
CVE-2024-20408 - CVSS 7.7 (high), 2024-10-23: A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2024-20407 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could…
CVE-2024-20388 - CVSS 5.3 (medium), 2024-10-23: A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to…
CVE-2024-20384 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2024-20402 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2024-20382 - CVSS 6.1 (medium), 2024-10-23: A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2024-20339 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the TLS processing feature of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series could allow an unauthenticated,…
CVE-2024-20351 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER…
CVE-2024-20342 - CVSS 8.6 (high), 2024-10-23: Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated,…
CVE-2024-20341 - CVSS 6.1 (medium), 2024-10-23: A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2024-20331 - CVSS 6.8 (medium), 2024-10-23: A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
CVE-2024-20330 - CVSS 8.6 (high), 2024-10-23: A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series…
CVE-2024-20299 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
CVE-2024-20297 - CVSS 5.8 (medium), 2024-10-23: A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
CVE-2024-20268 - CVSS 7.7 (high), 2024-10-23: A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2024-20355 - CVSS 5 (medium), 2024-05-22: A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and…
CVE-2024-20293 - CVSS 5.8 (medium), 2024-05-22: A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2024-20363 - CVSS 5.8 (medium), 2024-05-22: Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote…
CVE-2024-20261 - CVSS 5.8 (medium), 2024-05-22: A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2024-20358 - CVSS 6.7 (medium), 2024-04-24: A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat…
CVE-2024-20359 - CVSS 6 (medium), 2024-04-24: A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security…
CVE-2024-20353 - CVSS 8.6 (high), 2024-04-24: A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2023-20275 - CVSS 4.3 (medium), 2023-12-12: A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-20247 - CVSS 5 (medium), 2023-11-01: A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVE-2023-20071 - CVSS 5.8 (medium), 2023-11-01: Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the…
CVE-2023-20246 - CVSS 5.8 (medium), 2023-11-01: Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the…
CVE-2023-20267 - CVSS 5.3 (medium), 2023-11-01: A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This…
CVE-2023-20070 - CVSS 4 (medium), 2023-11-01: A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…
CVE-2023-20095 - CVSS 8.6 (high), 2023-11-01: A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-20264 - CVSS 6.1 (medium), 2023-11-01: A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security…
CVE-2023-20083 - CVSS 8.6 (high), 2023-11-01: A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2023-20042 - CVSS 8.6 (high), 2023-11-01: A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-20031 - CVSS 5.4 (medium), 2023-11-01: A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2023-20063 - CVSS 8.2 (high), 2023-11-01: A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that…
CVE-2023-20177 - CVSS 4 (medium), 2023-11-01: A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured…
CVE-2023-20256 - CVSS 5.8 (medium), 2023-11-01: Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2023-20086 - CVSS 8.6 (high), 2023-11-01: A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2023-20245 - CVSS 5.8 (medium), 2023-11-01: Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2023-20244 - CVSS 8.6 (high), 2023-11-01: A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an…
CVE-2023-20270 - CVSS 5.8 (medium), 2023-11-01: A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat…
CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
CVE-2023-20269 - CVSS 9.1 (critical), 2023-09-06: A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-20006 - CVSS 8.6 (high), 2023-06-28: A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2023-20107 - CVSS 7.5 (high), 2023-03-23: A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance…
CVE-2023-20081 - CVSS 6.8 (medium), 2023-03-23: A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software,…