Known vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.14.3.15

Version: 9.14.3.15
Software CPE: cpe:2.3:h:cisco_systems:Cisco Adaptive Security Appliance (ASA):*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) version 9.14.3.15 Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.14.3.15 is affected by 23 vulnerabilities: 5 high, 15 medium, 3 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150234 - Type conversion
CVE-2026-20249
CWE-704 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.34, 9.22.3.5, 9.23.1.47, 9.24.1.11, 10.0.2 16.09.2026 SB2026091660
#VU114228 - Double Free
CVE-2025-20134
CWE-415 Medium
No
No
9.16 19.08.2025 SB2025081957
#VU99337 - Improper input validation
CVE-2024-20408
CWE-20 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.31, 9.19.1.37, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102514
#VU99329 - Improper input validation
CVE-2024-20495
CWE-20 High
No
No
7.0.6.3, 7.2.0, 7.2.0.1, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.4.1, 7.2.5, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.3.0, 7.3.1, 7.3.1.1, 7.3.1.2, 7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102441
#VU99328 - Missing Release of Resource after Effective Lifetime
CVE-2024-20493
CWE-772 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102440
#VU99326 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20382
CWE-79 Low
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102431
#VU99325 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20341
CWE-79 Low
No
No
6.4.0.18, 7.0.6.2, 7.0.6.3, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.12.4.67, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.39, 9.17.1.45, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102431
#VU99324 - Authentication Bypass by Spoofing
CVE-2024-20299
CWE-290 Medium
No
No
6.4.0.17, 6.4.0.18, 7.0.6, 7.0.6.1, 7.0.6.2, 7.0.6.3, 7.2.4, 7.2.4.1, 7.2.5, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.6.0, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.12.4.67, 9.14.4.22, 9.14.4.23, 9.14.4.24, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.16.4.48, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.30, 9.17.1.33, 9.17.1.39, 9.17.1.45, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102430
#VU99323 - Authentication Bypass by Spoofing
CVE-2024-20297
CWE-290 Medium
No
No
7.0.6.2, 7.0.6.3, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102430
#VU99321 - Improper Handling of Extra Values
CVE-2024-20268
CWE-231 Medium
No
No
7.0.6.2, 7.0.6.3, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.39, 9.17.1.45, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102424
#VU99312 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-20485
CWE-94 Low
No
No
9.16.4.61, 9.17.1.45, 9.18.4.24, 9.19.1.28, 9.20.2.21, 9.22.1.1 24.10.2024 SB2024102414
#VU99289 - Access of Memory Location After End of Buffer
CVE-2024-20402
CWE-788 Medium
No
No
9.16.4.62, 9.18.4.34, 9.20.1, 9.22.1.1 23.10.2024 SB2024102366
#VU82686 - Improper Certificate Validation
CVE-2023-20247
CWE-295 Medium
No
No
9.12.4.62, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110244
#VU82682 - Improper Access Control
CVE-2023-20264
CWE-284 Medium
No
No
9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110237
#VU82680 - Resource exhaustion
CVE-2023-20095
CWE-400 High
No
No
9.8.4.46, 9.8.4.48, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.17.1.33, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110231
#VU82679 - Improper input validation
CVE-2023-20086
CWE-20 High
No
No
9.12.4.56, 9.12.4.58, 9.12.4.62, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.30, 9.17.1.33, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110228
#VU82670 - Business Logic Errors (3.0)
CVE-2023-20256
CWE-840 Medium
No
No
9.12.4.58, 9.12.4.62, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110208
#VU82669 - Business Logic Errors (3.0)
CVE-2023-20245
CWE-840 Medium
No
No
9.12.4.58, 9.12.4.62, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110208
#VU80521 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-20269
CWE-288 High
No
Exploited
9.16.4.38 07.09.2023 SB2023090728
#VU69201 - Incorrect Authorization
CVE-2022-20928
CWE-863 Medium
No
No
006.004(000.015), 006.006(007), 007.000(002), 007.002(000), 9.8.4.46, 009.008(004.046), 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5, 009.019(000.099) 10.11.2022 SB2022111016


Showing elements 1 - 20 out of 23