Known vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.12

Version: 9.12
Software CPE: cpe:2.3:h:cisco_systems:Cisco Adaptive Security Appliance (ASA):*:*:*:*:*:*:*:*
Total vulnerabilities: 44
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) version 9.12 Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.12 is affected by 44 vulnerabilities: 7 high, 28 medium, 9 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114228 - Double Free
CVE-2025-20134
CWE-415 Medium
No
No
9.16 19.08.2025 SB2025081957
#VU99312 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-20485
CWE-94 Low
No
No
9.16.4.61, 9.17.1.45, 9.18.4.24, 9.19.1.28, 9.20.2.21, 9.22.1.1 24.10.2024 SB2024102414
#VU99293 - Use of Insufficiently Random Values
CVE-2024-20331
CWE-330 Medium
No
No
9.12.4.67, 9.16.4.55, 9.17.1.39, 9.18.4.22, 9.19.1.28, 9.20.2.10, 9.22.1.1 24.10.2024 SB2024102402
#VU99289 - Access of Memory Location After End of Buffer
CVE-2024-20402
CWE-788 Medium
No
No
9.16.4.62, 9.18.4.34, 9.20.1, 9.22.1.1 23.10.2024 SB2024102366
#VU64596 - Insufficient Verification of Data Authenticity
CVE-2022-20829
CWE-345 Medium
Public exploit available
No
9.18.2 22.06.2022 SB2022062234
#VU62667 - Improper input validation
CVE-2022-20745
CWE-20 Medium
No
No
9.12.4.35, 9.14.3.13, 9.15.1.21, 9.16.2.7 27.04.2022 SB2022042739
#VU62665 - Heap-based Buffer Overflow
CVE-2022-20737
CWE-122 Medium
No
No
9.12.4.38, 9.14.4, 9.15.1.21, 9.16.2.14, 9.17.1.7 27.04.2022 SB2022042736
#VU57797 - Improperly Implemented Security Check for Standard
CVE-2021-34791
CWE-358 Medium
No
No
9.8.4.40, 9.12.4.18, 9.14.2.15, 9.15.1.15 29.10.2021 SB2021102916
#VU57796 - Improperly Implemented Security Check for Standard
CVE-2021-34790
CWE-358 Medium
No
No
9.8.4.40, 9.12.4.18, 9.14.2.15, 9.15.1.15 29.10.2021 SB2021102916
#VU57758 - Memory corruption
CVE-2021-40117
CWE-119 Medium
No
No
9.8.4.40, 9.12.4.26, 9.14.3.9, 9.15.1.17 28.10.2021 SB2021102806
#VU57757 - Out-of-bounds write
CVE-2021-40118
CWE-787 Medium
No
No
9.8.4.40, 9.12.4.29, 9.14.3.9, 9.15.1.17, 9.16.2.3 28.10.2021 SB2021102805
#VU57755 - Stack-based buffer overflow
CVE-2021-1573
CWE-121 Medium
No
No
9.8.4.40, 9.12.4.26, 9.14.3, 9.15.1.17, 9.16.1.28 28.10.2021 SB2021102805
#VU57753 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CVE-2021-34793
CWE-924 Medium
No
No
9.8.4.40, 9.12.4.24, 9.14.2.15, 9.15.1.15 28.10.2021 SB2021102803
#VU47939 - Resource exhaustion
CVE-2020-3572
CWE-400 Medium
No
No
9.6.4.45, 9.8.4.26, 9.9.2.80, 9.10.1.44, 9.12.4.4 21.10.2020 SB2020102715
#VU47940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3599
CWE-79 Low
No
No
9.6.4.45, 9.8.4.29, 9.9.2.80, 9.10.1.43, 9.12.4.4 21.10.2020 SB2020102716
#VU47941 - Resource exhaustion
CVE-2020-3554
CWE-400 Medium
No
No
9.12.4.3 21.10.2020 SB2020102717
#VU47942 - Unrestricted Upload of File with Dangerous Type
CVE-2020-3436
CWE-434 Medium
No
No
9.6.4.45, 9.8.4.25, 9.9.2.80, 9.10.1.44, 9.12.4.2 21.10.2020 SB2020102718
#VU47944 - Improper Access Control
CVE-2020-3564
CWE-284 Medium
No
No
9.8.4.26, 9.9.2.80, 9.10.1.44, 9.12.4.2 21.10.2020 SB2020102720
#VU47945 - Improper Resource Shutdown or Release
CVE-2020-3555
CWE-404 Medium
No
No
9.6.4.43, 9.8.4.26, 9.9.2.80, 9.10.1.43, 9.12.4.2 21.10.2020 SB2020102721
#VU47946 - Protection Mechanism Failure
CVE-2020-3458
CWE-693 Low
No
No
9.8.4.26, 9.9.2.80, 9.10.1.43, 9.12.4.3 21.10.2020 SB2020102722


Showing elements 1 - 20 out of 44