Priority MEDIUM 40
Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7, 8.0 before 8.0(3)20,…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03419 · Published 2008-09-04 · No fix listed
Priority LOW 39
Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before 8.1(2)19 allows remote att…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0266 · Published 2009-04-09 · No fix listed
Priority LOW 38
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net inspection is enabled, allows…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01916 · Published 2009-04-09 · No fix listed
Priority LOW 38
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01916 · Published 2009-04-09 · No fix listed
Priority LOW 38
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0188 · Published 2009-04-09 · No fix listed CWE-287
Priority LOW 37
Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec client authentication,…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.03193 · Published 2008-09-04 · No fix listed
Priority LOW 36
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames an…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.02637 · Published 2008-09-04 · No fix listed CWE-200
Priority LOW 36
The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote at…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.0284 · Published 2008-09-04 · No fix listed CWE-20
Priority LOW 36
Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows re…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.0284 · Published 2008-09-04 · No fix listed CWE-399
Priority LOW 31
The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticate…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01307 · Published 2009-12-29 · No fix listed CWE-264
Priority LOW 27
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a deni…
CVSS 2.0MEDIUM 5.7· Adjacent network · No auth · Interaction — · EPSS 0.00742 · Published 2009-04-09 · No fix listed
Priority LOW 22
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0114 · Published 2009-04-09 · No fix listed CWE-264