Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Cisco Adaptive Security Appliance (ASA) Software 9.10.1.17, 9.4.4.34 and 3 more versions Clear all filters
TI-2019-01339 CVE-2019-1713 · GHSA-c2vh-w5p4-hr7q

Cisco Adaptive Security Appliance Software Cross-Site Request Forgery Vulnerability

Priority MEDIUM 40

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affect…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01094 Published 2019-05-03 Fixed in 9.4.4.34, 9.6.4.25 +3 CWE-352
TI-2019-01331 CVE-2019-1705 · GHSA-3p9x-fj5f-w25c

Cisco Adaptive Security Appliance Software VPN Denial of Service Vulnerability

Priority LOW 36

A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of service (DoS) condition on the remote acces…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02039 Published 2019-05-03 Fixed in 9.4.4.34, 9.6.4.25 +3 CWE-404
TI-2019-01327 CVE-2019-1701 · GHSA-xwf3-c99h-p43f

Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerabilities

Priority LOW 24

Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to conduct a cross-site s…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0087 Published 2019-05-03 Fixed in 9.4.4.34, 9.6.4.25 +5 CWE-79
TI-2019-01320 CVE-2019-1694 · GHSA-p7p7-4pch-phj8

Improper input validation in Cisco Adaptive Security Appliance Software

Priority MEDIUM 48

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected devi…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02539 Published 2019-05-03 Fixed in 9.4.4.34, 9.6.4.25 +5 CWE-20
TI-2019-01319 CVE-2019-1693 · GHSA-3cqj-jcvx-xhxr

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability

Priority LOW 33

A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS)…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02048 Published 2019-05-03 Fixed in 9.4.4.34, 9.6.4.25 +5 CWE-399