Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority MEDIUM 42

A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Soft…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01726 Published 2019-05-03 Fixed in 9.8.4, 9.9.2.50 +2 CWE-332
Priority MEDIUM 47

A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA) Soft…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01993 Published 2019-05-03 Fixed in 9.8.4, 9.9.2.50 +3 CWE-255
Priority MEDIUM 47

A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could a…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02059 Published 2019-05-03 Fixed in 9.8.4, 9.9.2.50 +3 CWE-404
Priority LOW 24

Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to conduct a cross-site s…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0087 Published 2019-05-03 Fixed in 9.4.4.34, 9.6.4.25 +5 CWE-79
Priority LOW 37

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00663 Published 2019-05-03 Fixed in 6.2.3.12, 6.3.0.3 CWE-78
Priority MEDIUM 48

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected devi…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02539 Published 2019-05-03 Fixed in 9.4.4.34, 9.6.4.25 +5 CWE-20
Priority LOW 30

A vulnerability in the detection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to send data directly to the…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00712 Published 2019-05-03 Fixed in 9.8.4, 9.9.2.50 +3 CWE-284
Priority LOW 33

A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS)…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02048 Published 2019-05-03 Fixed in 9.4.4.34, 9.6.4.25 +5 CWE-399