Known vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) - page 2

Software CPE: cpe:2.3:h:cisco_systems:Cisco Adaptive Security Appliance (ASA):*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 7
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) Cisco Secure Firewall Adaptive Security Appliance (ASA) is affected by 159 known vulnerabilities: 2 critical, 23 high, 101 medium, 33 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123662 - Improper input validation
CVE-2026-20025
CWE-20 Low
No
No
9.16.4.85, 9.18.4.71, 9.20.4.10, 9.22.2.13, 9.23.1.19, 9.24.1 10.03.2026 SB2026031001
#VU123661 - Heap-based Buffer Overflow
CVE-2026-20024
CWE-122 Low
No
No
9.16.4.84, 9.18.4.57, 9.19.1.42, 9.20.3.20, 9.20.4, 9.22.2, 9.23.1.3, 9.24.1 10.03.2026 SB2026031001
#VU123656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20102
CWE-79 Low
No
No
9.16.4.89, 9.18.4.71, 9.20.4.19, 9.22.2.32, 9.23.1.26, 9.24.1 09.03.2026 SB2026030966
#VU123655 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20070
CWE-79 Low
No
No
9.16.4.89, 9.18.4.71, 9.20.4.14, 9.22.2.20, 9.23.1.22, 9.24.1 09.03.2026 SB2026030965
#VU123652 - Improper Access Control
CVE-2026-20073
CWE-284 Medium
No
No
9.16.4.85, 9.18.4.71, 9.20.4.14, 9.22.2.14, 9.23.1.22, 9.24.1 09.03.2026 SB2026030960
#VU123651 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-20069
CWE-444 Medium
No
No
9.16.4.85, 9.18.4.66, 9.20.4.7, 9.22.2.13, 9.23.1.13, 9.24.1 09.03.2026 SB2026030959
#VU123618 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-20008
CWE-78 Low
No
No
9.16.4.85, 9.18.4.66, 9.20.4, 9.22.2.4, 9.23.1.7, 9.24.1 06.03.2026 SB2026030648
#VU123563 - Improper Neutralization of Special Elements
CVE-2026-20009
CWE-138 Medium
No
No
9.18.4.71, 9.20.4.10, 9.22.2.14, 9.23.1.19 05.03.2026 SB2026030524
#VU117302 - Buffer Access with Incorrect Length Value
CVE-2025-20360
CWE-805 Medium
No
No
- 15.10.2025 SB20251015158
SB20251015159
SB20251015160
and 2 more
#VU117301 - Buffer Under-read
CVE-2025-20359
CWE-127 Medium
No
No
- 15.10.2025 SB20251015157
SB20251015159
SB20251015160
and 2 more
#VU116120 - Heap-based Buffer Overflow
CVE-2025-20363
CWE-122 Critical
No
No
9.16.4.84, 9.18.4.57, 9.19.1.42, 9.20.3.16, 9.22.2, 9.23.1.3 25.09.2025 SB2025092573
SB2025092574
SB2025092575
#VU116119 - Buffer overflow
CVE-2025-20333
CWE-120 High
No
Exploited
9.16.4.85, 9.17.1.45, 9.18.4.47, 9.19.1.37, 9.20.3.7, 9.22.1.3 25.09.2025 SB2025092570
#VU116118 - Missing Authorization
CVE-2025-20362
CWE-862 High
No
Exploited
- 25.09.2025 SB2025092566
#VU114759 - Improper Resource Shutdown or Release
CVE-2025-20127
CWE-404 Medium
No
No
9.20.3.10, 9.22.1.3, 9.22.2.4 03.09.2025 SB2025090339
#VU114228 - Double Free
CVE-2025-20134
CWE-415 Medium
No
No
9.16 19.08.2025 SB2025081957
#VU114091 - Memory corruption
CVE-2025-20222
CWE-119 Medium
No
No
9.16.4.82, 9.19.1.42, 9.20.3.10, 9.20.4, 9.22.2, 9.23.1 14.08.2025 SB2025081492
#VU101094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2120
CWE-79 Low
No
Exploited
9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.8, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.2.45, 9.8.3, 9.8.3.8, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3.26, 9.8.3.29, 9.8.4, 9.8.4.3, 9.8.4.7, 9.8.4.8, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.4.20, 9.8.4.22, 9.8.4.25, 9.8.4.26, 9.8.4.29, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.46, 9.8.4.48, 9.9.1, 9.9.1.2, 9.9.1.3, 9.9.1.4, 9.9.1.5, 9.9.2, 9.9.2.1, 9.9.2.9, 9.9.2.14, 9.9.2.18, 9.9.2.25, 9.9.2.27, 9.9.2.32, 9.9.2.36, 9.9.2.40, 9.9.2.47, 9.9.2.50, 9.9.2.52, 9.9.2.56, 9.9.2.59, 9.9.2.61, 9.9.2.66, 9.9.2.67, 9.9.2.74, 9.9.2.80, 9.9.2.83, 9.9.2.85, 9.9.2.235, 9.10.1, 9.10.1.2, 9.10.1.7, 9.10.1.10, 9.10.1.11, 9.10.1.17, 9.10.1.22, 9.10.1.27, 9.10.1.30, 9.10.1.32, 9.10.1.37, 9.10.1.40, 9.10.1.42, 9.10.1.44, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.3.12, 9.12.4, 9.12.4.2, 9.12.4.4, 9.12.4.7, 9.12.4.8, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.12.4.67, 9.13.1, 9.13.1.2, 9.13.1.7, 9.13.1.10, 9.13.1.12, 9.13.1.13, 9.13.1.16, 9.13.1.19, 9.13.1.21, 9.14.1, 9.14.1.6, 9.14.1.10, 9.14.1.15, 9.14.1.19, 9.14.1.30, 9.14.2, 9.14.2.4, 9.14.2.8, 9.14.2.13, 9.14.2.15, 9.14.3, 9.14.3.1, 9.14.3.9, 9.14.3.11, 9.14.3.13, 9.14.3.15, 9.14.3.18, 9.14.4, 9.14.4.6, 9.14.4.7, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.14.4.24, 9.15.1, 9.15.1.1, 9.15.1.7, 9.15.1.10, 9.15.1.15, 9.15.1.16, 9.15.1.17, 9.15.1.21, 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.3, 9.16.2.7, 9.16.2.11, 9.16.2.13, 9.16.2.14, 9.16.3, 9.16.3.3, 9.16.3.14, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.16.4.48, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1, 9.17.1.7, 9.17.1.9, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.17.1.33, 9.17.1.39, 9.17.1.45, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 03.12.2024 SB2024120302
#VU99340 - Authentication Bypass by Spoofing
CVE-2024-20384
CWE-290 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102517
#VU99338 - NULL Pointer Dereference
CVE-2024-20426
CWE-476 High
No
No
7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102515
#VU99337 - Improper input validation
CVE-2024-20408
CWE-20 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.31, 9.19.1.37, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102514


Showing elements 21 - 40 out of 159