Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

63 records

Priority MEDIUM 40

A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00717 Published 2023-03-23 No fix listed CWE-332
Priority MEDIUM 40

A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attac…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2022-04-21 No fix listed CWE-345
Priority MEDIUM 46

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01362 Published 2022-01-11 Fixed in 6.4.0.13, 6.6.5 CWE-121
Priority MEDIUM 46

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01362 Published 2021-10-27 No fix listed CWE-121
Priority MEDIUM 47

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of servi…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01729 Published 2021-10-27 No fix listed CWE-119
Priority MEDIUM 44

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poiso…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00586 Published 2021-10-27 No fix listed CWE-924
Priority LOW 26

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01145 Published 2021-10-27 No fix listed CWE-358
Priority LOW 26

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01145 Published 2021-10-27 No fix listed CWE-358
Priority MEDIUM 44

A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of serv…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0269 Published 2020-10-21 No fix listed CWE-400
Priority LOW 36

A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and rel…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01696 Published 2020-10-21 No fix listed CWE-404
Priority LOW 24

A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to inject arbitrary…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01275 Published 2020-10-21 No fix listed CWE-93
Priority LOW 33

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass FTP inspection.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01342 Published 2020-10-21 No fix listed CWE-284
Priority MEDIUM 47

A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of se…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01795 Published 2020-10-21 No fix listed CWE-400
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00833 Published 2020-10-21 No fix listed CWE-79
Priority MEDIUM 50

A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload u…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03861 Published 2020-10-21 No fix listed CWE-400
Priority MEDIUM 47

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files t…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01937 Published 2020-10-21 No fix listed CWE-434
Priority MEDIUM 46

A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01446 Published 2020-10-21 No fix listed CWE-400
Priority MEDIUM 47

A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01848 Published 2020-10-21 No fix listed CWE-400
Priority MEDIUM 40

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04072 Published 2020-09-23 No fix listed CWE-119
Priority LOW 35

A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01245 Published 2020-05-06 No fix listed CWE-400
Priority LOW 35

A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01245 Published 2020-05-06 No fix listed CWE-400
Priority LOW 35

A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01245 Published 2020-05-06 No fix listed CWE-399
Priority MEDIUM 43

A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilizati…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01985 Published 2019-10-02 No fix listed CWE-400
Priority LOW 29

A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-si…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01067 Published 2019-10-02 No fix listed CWE-79
Load more