Priority MEDIUM 40
A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00717 · Published 2023-03-23 · No fix listed CWE-332
Priority MEDIUM 40
A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attac…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00702 · Published 2022-04-21 · No fix listed CWE-345
Priority MEDIUM 46
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01362 · Published 2022-01-11 · Fixed in 6.4.0.13, 6.6.5 CWE-121
Priority MEDIUM 46
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01362 · Published 2021-10-27 · No fix listed CWE-121
Priority MEDIUM 47
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of servi…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01729 · Published 2021-10-27 · No fix listed CWE-119
Priority MEDIUM 44
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poiso…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00586 · Published 2021-10-27 · No fix listed CWE-924
Priority LOW 26
Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allo…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01145 · Published 2021-10-27 · No fix listed CWE-358
Priority LOW 26
Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allo…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01145 · Published 2021-10-27 · No fix listed CWE-358
Priority LOW 32
A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01045 · Published 2021-10-27 · No fix listed CWE-183
Priority MEDIUM 44
A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of serv…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0269 · Published 2020-10-21 · No fix listed CWE-400
Priority LOW 36
A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and rel…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01696 · Published 2020-10-21 · No fix listed CWE-404
Priority LOW 24
A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to inject arbitrary…
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.01275 · Published 2020-10-21 · No fix listed CWE-93
Priority LOW 33
A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass FTP inspection.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01342 · Published 2020-10-21 · No fix listed CWE-284
Priority MEDIUM 47
A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of se…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01795 · Published 2020-10-21 · No fix listed CWE-400
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00833 · Published 2020-10-21 · No fix listed CWE-79
Priority MEDIUM 50
A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload u…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.03861 · Published 2020-10-21 · No fix listed CWE-400
Priority MEDIUM 47
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files t…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01937 · Published 2020-10-21 · No fix listed CWE-434
Priority MEDIUM 46
A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01446 · Published 2020-10-21 · No fix listed CWE-400
Priority MEDIUM 47
A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01848 · Published 2020-10-21 · No fix listed CWE-400
Priority MEDIUM 40
A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04072 · Published 2020-09-23 · No fix listed CWE-119
Priority LOW 35
A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01245 · Published 2020-05-06 · No fix listed CWE-400
Priority LOW 35
A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remo…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01245 · Published 2020-05-06 · No fix listed CWE-400
Priority LOW 35
A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01245 · Published 2020-05-06 · No fix listed CWE-399
Priority MEDIUM 43
A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilizati…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01985 · Published 2019-10-02 · No fix listed CWE-400
Priority LOW 29
A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-si…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01067 · Published 2019-10-02 · No fix listed CWE-79
Load more