Known vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.5

Version: 9.5
Software CPE: cpe:2.3:h:cisco_systems:Cisco Adaptive Security Appliance (ASA):*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) version 9.5 Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.5 is affected by 19 vulnerabilities: 5 high, 9 medium, 5 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64596 - Insufficient Verification of Data Authenticity
CVE-2022-20829
CWE-345 Medium
Public exploit available
No
9.18.2 22.06.2022 SB2022062234
#VU47881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3583
CWE-79 Low
No
No
9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 22.10.2020 SB2020102209
#VU47880 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3582
CWE-79 Low
No
No
9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 22.10.2020 SB2020102209
#VU47879 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3581
CWE-79 Low
No
No
9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 22.10.2020 SB2020102209
#VU47878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3580
CWE-79 Low
Public exploit available
Exploited
9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 21.10.2020 SB2020102209
#VU27602 - Resource Management Errors
CVE-2020-3303
CWE-399 Medium
No
No
9.6.4.36, 9.8.4.10, 9.10.1.30, 9.12.2.9 07.05.2020 SB2020050709
#VU27601 - Resource exhaustion
CVE-2020-3305
CWE-400 Medium
No
No
9.6.4.36, 9.8.4.10, 9.10.1.30, 9.12.2.9 07.05.2020 SB2020050709
#VU27600 - Out-of-bounds read
CVE-2020-3298
CWE-125 Medium
No
No
9.6.4.40, 9.8.4.17, 9.9.2.66, 9.10.1.37, 9.12.3.7, 9.13.1.7 07.05.2020 SB2020050719
#VU27596 - Resource exhaustion
CVE-2020-3306
CWE-400 Medium
No
No
9.6.4.34, 9.8.4.10, 9.10.1.30, 9.12.3 07.05.2020 SB2020050716
#VU27595 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3259
CWE-200 High
No
Exploited
9.8.4.20, 9.9.2.67, 9.10.1.39, 9.12.3.9, 9.13.1.10 07.05.2020 SB2020050715
#VU27594 - Improper input validation
CVE-2020-3191
CWE-20 High
No
No
9.6.4.36, 9.8.4.12, 9.9.2.66, 9.10.1.37, 9.12.2.9 07.05.2020 SB2020050714
#VU27593 - Resource exhaustion
CVE-2020-3254
CWE-400 High
No
No
9.6.4.34, 9.8.4.7, 9.9.2.66, 9.10.1.27, 9.12.2.1 07.05.2020 SB2020050713
#VU27592 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3187
CWE-22 High
Public exploit available
No
9.6.4.40, 9.8.4.15, 9.9.2.66, 9.10.1.37, 9.12.3.2, 9.13.1.7 07.05.2020 SB2020050711
#VU19190 - Resource exhaustion
CVE-2019-1873
CWE-400 Medium
No
No
9.4.4.36, 9.6.4.29, 9.8.4.3, 9.9.2.52, 9.10.1.22, 9.12.2 16.07.2019 SB2019071027
#VU16625 - Permissions, Privileges, and Access Controls
CVE-2018-15465
CWE-264 Low
No
No
9.4.4.29, 9.6.4.20, 9.8.3.18, 9.9.2.36, 9.10.1.7 19.12.2018 SB2018121910
#VU6311 - Improper input validation
CVE-2017-6609
CWE-20 Medium
No
No
- 19.04.2017 SB2017041903
#VU6312 - Memory corruption
CVE-2017-6607
CWE-119 Medium
No
No
- 19.04.2017 SB2017041904
#VU1046 - Improper input validation
CVE-2016-6431
CWE-20 Medium
No
No
- 19.10.2016 SB2016101916
SB2024072114
#VU1048 - Buffer overflow
CVE-2016-6432
CWE-120 High
No
No
- 19.10.2016 SB2016101918
SB2024072115