Known vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.17.1.7

Version: 9.17.1.7
Software CPE: cpe:2.3:h:cisco_systems:Cisco Adaptive Security Appliance (ASA):*:*:*:*:*:*:*:*
Total vulnerabilities: 38
Public exploits: 1
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) version 9.17.1.7 Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.17.1.7 is affected by 38 vulnerabilities: 6 high, 21 medium, 11 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150234 - Type conversion
CVE-2026-20249
CWE-704 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.34, 9.22.3.5, 9.23.1.47, 9.24.1.11, 10.0.2 16.09.2026 SB2026091660
#VU123678 - Argument Injection or Modification
CVE-2026-20016
CWE-88 Low
No
No
9.16.4.89, 9.18.4.71, 9.20.4.19, 9.22.2.20, 9.23.1.26, 9.24.1 10.03.2026 SB2026031047
#VU123662 - Improper input validation
CVE-2026-20025
CWE-20 Low
No
No
9.16.4.85, 9.18.4.71, 9.20.4.10, 9.22.2.13, 9.23.1.19, 9.24.1 10.03.2026 SB2026031001
#VU123661 - Heap-based Buffer Overflow
CVE-2026-20024
CWE-122 Low
No
No
9.16.4.84, 9.18.4.57, 9.19.1.42, 9.20.3.20, 9.20.4, 9.22.2, 9.23.1.3, 9.24.1 10.03.2026 SB2026031001
#VU123659 - Out-of-bounds write
CVE-2026-20022
CWE-787 Medium
No
No
9.16.4.89, 9.18.4.71, 9.20.4.19, 9.22.2.20, 9.23.1.26, 9.24.1 09.03.2026 SB2026031001
#VU123657 - Memory corruption
CVE-2026-20020
CWE-119 Low
No
No
9.16.4.89, 9.18.4.66, 9.20.4, 9.22.2.4, 9.23.1.7, 9.24.1 09.03.2026 SB2026031001
#VU123656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20102
CWE-79 Low
No
No
9.16.4.89, 9.18.4.71, 9.20.4.19, 9.22.2.32, 9.23.1.26, 9.24.1 09.03.2026 SB2026030966
#VU123655 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20070
CWE-79 Low
No
No
9.16.4.89, 9.18.4.71, 9.20.4.14, 9.22.2.20, 9.23.1.22, 9.24.1 09.03.2026 SB2026030965
#VU123652 - Improper Access Control
CVE-2026-20073
CWE-284 Medium
No
No
9.16.4.85, 9.18.4.71, 9.20.4.14, 9.22.2.14, 9.23.1.22, 9.24.1 09.03.2026 SB2026030960
#VU123651 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-20069
CWE-444 Medium
No
No
9.16.4.85, 9.18.4.66, 9.20.4.7, 9.22.2.13, 9.23.1.13, 9.24.1 09.03.2026 SB2026030959
#VU123618 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-20008
CWE-78 Low
No
No
9.16.4.85, 9.18.4.66, 9.20.4, 9.22.2.4, 9.23.1.7, 9.24.1 06.03.2026 SB2026030648
#VU123563 - Improper Neutralization of Special Elements
CVE-2026-20009
CWE-138 Medium
No
No
9.18.4.71, 9.20.4.10, 9.22.2.14, 9.23.1.19 05.03.2026 SB2026030524
#VU116119 - Buffer overflow
CVE-2025-20333
CWE-120 High
No
Exploited
9.16.4.85, 9.17.1.45, 9.18.4.47, 9.19.1.37, 9.20.3.7, 9.22.1.3 25.09.2025 SB2025092570
#VU99340 - Authentication Bypass by Spoofing
CVE-2024-20384
CWE-290 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102517
#VU99337 - Improper input validation
CVE-2024-20408
CWE-20 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.31, 9.19.1.37, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102514
#VU99334 - Improper Neutralization of Expression/Command Delimiters
CVE-2024-20329
CWE-146 Medium
No
No
9.17.1.39, 9.17.1.45, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102506
#VU99329 - Improper input validation
CVE-2024-20495
CWE-20 High
No
No
7.0.6.3, 7.2.0, 7.2.0.1, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.4.1, 7.2.5, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.3.0, 7.3.1, 7.3.1.1, 7.3.1.2, 7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102441
#VU99328 - Missing Release of Resource after Effective Lifetime
CVE-2024-20493
CWE-772 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102440
#VU99326 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20382
CWE-79 Low
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102431
#VU99325 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20341
CWE-79 Low
No
No
6.4.0.18, 7.0.6.2, 7.0.6.3, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.12.4.67, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.39, 9.17.1.45, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102431


Showing elements 1 - 20 out of 38