Known vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) - page 4

Software CPE: cpe:2.3:h:cisco_systems:Cisco Adaptive Security Appliance (ASA):*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 7
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) Cisco Secure Firewall Adaptive Security Appliance (ASA) is affected by 159 known vulnerabilities: 2 critical, 23 high, 101 medium, 33 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83885 - Insufficient Verification of Data Authenticity
CVE-2023-20275
CWE-345 Low
No
No
- 05.12.2023 SB2023120533
#VU82686 - Improper Certificate Validation
CVE-2023-20247
CWE-295 Medium
No
No
9.12.4.62, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110244
#VU82682 - Improper Access Control
CVE-2023-20264
CWE-284 Medium
No
No
9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110237
#VU82680 - Resource exhaustion
CVE-2023-20095
CWE-400 High
No
No
9.8.4.46, 9.8.4.48, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.17.1.33, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110231
#VU82679 - Improper input validation
CVE-2023-20086
CWE-20 High
No
No
9.12.4.56, 9.12.4.58, 9.12.4.62, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.30, 9.17.1.33, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110228
#VU82670 - Business Logic Errors (3.0)
CVE-2023-20256
CWE-840 Medium
No
No
9.12.4.58, 9.12.4.62, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110208
#VU82669 - Business Logic Errors (3.0)
CVE-2023-20245
CWE-840 Medium
No
No
9.12.4.58, 9.12.4.62, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110208
#VU82663 - Improper Resource Shutdown or Release
CVE-2023-20042
CWE-404 Medium
No
No
9.16.4.14, 9.17.1.30, 9.18.2.8, 9.18.3, 9.18.4, 9.19.1.5, 9.20.1 01.11.2023 SB2023110150
#VU80521 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-20269
CWE-288 High
No
Exploited
9.16.4.38 07.09.2023 SB2023090728
#VU77080 - Improper input validation
CVE-2023-20006
CWE-20 Medium
No
No
- 07.06.2023 SB2023060741
#VU73980 - Improper input validation
CVE-2023-20081
CWE-20 Medium
No
No
- 23.03.2023 SB2023032325
#VU73975 - Key Management Errors
CVE-2023-20107
CWE-320 Medium
No
No
9.12.1 23.03.2023 SB2023032326
#VU69202 - Memory corruption
CVE-2022-20947
CWE-119 High
No
No
006.004(000.015), 006.006(007), 007.000(002), 007.002(000), 009.008(004.044), 9.8.4.45, 9.8.4.46, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.14.4, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5 10.11.2022 SB2022111015
#VU69201 - Incorrect Authorization
CVE-2022-20928
CWE-863 Medium
No
No
006.004(000.015), 006.006(007), 007.000(002), 007.002(000), 9.8.4.46, 009.008(004.046), 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5, 009.019(000.099) 10.11.2022 SB2022111016
#VU69200 - Improper Check or Handling of Exceptional Conditions
CVE-2022-20924
CWE-703 Medium
No
No
006.006(007), 007.000(004), 007.002(001), 9.14.4.13, 009.014(004.013), 9.14.4.14, 9.14.4.15, 9.14.4.17, 009.016(003.015), 9.16.3.19, 9.16.3.23, 009.016(003.099), 009.016(004), 9.16.4, 009.017(001.017), 9.17.1.20, 009.018(001.003), 009.018(001.099), 9.18.2, 009.018(002), 9.18.2.5, 009.019(000.099), 099.014(004.026), 099.017(002.138), 099.018(002.027), 099.018(028.006), 099.018(030.074), 099.019(001.112), 099.019(021.034), 099.019(022.033), 099.019(023.030), 099.019(030.003), 099.020(000.002) 10.11.2022 SB2022111014
#VU69199 - Memory corruption
CVE-2022-20927
CWE-119 Medium
No
No
006.006(007), 007.000(002), 007.002(000), 9.14.4, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5 10.11.2022 SB2022111012
#VU69198 -
CVE-2022-20826
Low
No
No
1.0.22, 1.2.17, 9.17.1.15, 9.18.2 10.11.2022 SB2022111007
#VU66392 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-20713
CWE-444 Low
No
No
9.17.1 11.08.2022 SB2022081103
#VU66391 - Observable discrepancy
CVE-2022-20866
CWE-203 Medium
Available
No
9.16.3.19, 9.17.1.13, 9.18.2 11.08.2022 SB2022081104
#VU64596 - Insufficient Verification of Data Authenticity
CVE-2022-20829
CWE-345 Medium
Available
No
9.18.2 22.06.2022 SB2022062234


Showing elements 61 - 80 out of 159