Known vulnerabilities in Cisco Adaptive Security Appliance (ASA) - page 2

Software CPE: cpe:2.3:h:cisco_systems:asa:*:*:*:*:*:*:*:*
Total vulnerabilities: 144
Public exploits: 7
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) is affected by 144 known vulnerabilities: 2 critical, 22 high, 87 medium, 33 low Critical High Medium Low

Vulnerabilities (144)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114091 - Memory corruption
CVE-2025-20222
CWE-119 Medium
No
No
9.16.4.82, 9.19.1.42, 9.20.3.10, 9.20.4, 9.22.2, 9.23.1 14.08.2025 SB2025081492
#VU101094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2120
CWE-79 Low
No
Exploited
9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.8, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.2.45, 9.8.3, 9.8.3.8, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3.26, 9.8.3.29, 9.8.4, 9.8.4.3, 9.8.4.7, 9.8.4.8, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.4.20, 9.8.4.22, 9.8.4.25, 9.8.4.26, 9.8.4.29, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.46, 9.8.4.48, 9.9.1, 9.9.1.2, 9.9.1.3, 9.9.1.4, 9.9.1.5, 9.9.2, 9.9.2.1, 9.9.2.9, 9.9.2.14, 9.9.2.18, 9.9.2.25, 9.9.2.27, 9.9.2.32, 9.9.2.36, 9.9.2.40, 9.9.2.47, 9.9.2.50, 9.9.2.52, 9.9.2.56, 9.9.2.59, 9.9.2.61, 9.9.2.66, 9.9.2.67, 9.9.2.74, 9.9.2.80, 9.9.2.83, 9.9.2.85, 9.9.2.235, 9.10.1, 9.10.1.2, 9.10.1.7, 9.10.1.10, 9.10.1.11, 9.10.1.17, 9.10.1.22, 9.10.1.27, 9.10.1.30, 9.10.1.32, 9.10.1.37, 9.10.1.40, 9.10.1.42, 9.10.1.44, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.3.12, 9.12.4, 9.12.4.2, 9.12.4.4, 9.12.4.7, 9.12.4.8, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.12.4.67, 9.13.1, 9.13.1.2, 9.13.1.7, 9.13.1.10, 9.13.1.12, 9.13.1.13, 9.13.1.16, 9.13.1.19, 9.13.1.21, 9.14.1, 9.14.1.6, 9.14.1.10, 9.14.1.15, 9.14.1.19, 9.14.1.30, 9.14.2, 9.14.2.4, 9.14.2.8, 9.14.2.13, 9.14.2.15, 9.14.3, 9.14.3.1, 9.14.3.9, 9.14.3.11, 9.14.3.13, 9.14.3.15, 9.14.3.18, 9.14.4, 9.14.4.6, 9.14.4.7, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.14.4.24, 9.15.1, 9.15.1.1, 9.15.1.7, 9.15.1.10, 9.15.1.15, 9.15.1.16, 9.15.1.17, 9.15.1.21, 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.3, 9.16.2.7, 9.16.2.11, 9.16.2.13, 9.16.2.14, 9.16.3, 9.16.3.3, 9.16.3.14, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.16.4.48, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1, 9.17.1.7, 9.17.1.9, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.17.1.33, 9.17.1.39, 9.17.1.45, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 03.12.2024 SB2024120302
#VU99340 - Authentication Bypass by Spoofing
CVE-2024-20384
CWE-290 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102517
#VU99338 - NULL Pointer Dereference
CVE-2024-20426
CWE-476 High
No
No
7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102515
#VU99337 - Improper input validation
CVE-2024-20408
CWE-20 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.31, 9.19.1.37, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102514
#VU99335 - Resource exhaustion
CVE-2024-20526
CWE-400 Medium
No
No
9.16.4.71, 9.18.4.47, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102507
#VU99334 - Improper Neutralization of Expression/Command Delimiters
CVE-2024-20329
CWE-146 Medium
No
No
9.17.1.39, 9.17.1.45, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102506
#VU99329 - Improper input validation
CVE-2024-20495
CWE-20 High
No
No
7.0.6.3, 7.2.0, 7.2.0.1, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.4.1, 7.2.5, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.3.0, 7.3.1, 7.3.1.1, 7.3.1.2, 7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102441
#VU99328 - Missing Release of Resource after Effective Lifetime
CVE-2024-20493
CWE-772 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102440
#VU99327 - Improper input validation
CVE-2024-20494
CWE-20 High
No
No
7.4.2, 7.4.2.1, 7.6.0, 9.19.1.37, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102432
#VU99326 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20382
CWE-79 Low
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102431
#VU99325 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20341
CWE-79 Low
No
No
6.4.0.18, 7.0.6.2, 7.0.6.3, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.12.4.67, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.39, 9.17.1.45, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102431
#VU99324 - Authentication Bypass by Spoofing
CVE-2024-20299
CWE-290 Medium
No
No
6.4.0.17, 6.4.0.18, 7.0.6, 7.0.6.1, 7.0.6.2, 7.0.6.3, 7.2.4, 7.2.4.1, 7.2.5, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.6.0, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.12.4.67, 9.14.4.22, 9.14.4.23, 9.14.4.24, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.16.4.48, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.30, 9.17.1.33, 9.17.1.39, 9.17.1.45, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102430
#VU99323 - Authentication Bypass by Spoofing
CVE-2024-20297
CWE-290 Medium
No
No
7.0.6.2, 7.0.6.3, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.0, 7.4.1, 7.4.1.1, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102430
#VU99322 - Permissions, Privileges, and Access Controls
CVE-2024-20370
CWE-264 Low
No
No
7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.17.1.45, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.31, 9.19.1.37, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102429
#VU99321 - Improper Handling of Extra Values
CVE-2024-20268
CWE-231 Medium
No
No
7.0.6.2, 7.0.6.3, 7.2.6, 7.2.7, 7.2.8, 7.2.8.1, 7.2.9, 7.4.2, 7.4.2.1, 7.6.0, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.39, 9.17.1.45, 9.18.4.22, 9.18.4.24, 9.18.4.29, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.28, 9.19.1.31, 9.19.1.37, 9.20.2.10, 9.20.2.21, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102424
#VU99312 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-20485
CWE-94 Low
No
No
9.16.4.61, 9.17.1.45, 9.18.4.24, 9.19.1.28, 9.20.2.21, 9.22.1.1 24.10.2024 SB2024102414
#VU99293 - Use of Insufficiently Random Values
CVE-2024-20331
CWE-330 Medium
No
No
9.12.4.67, 9.16.4.55, 9.17.1.39, 9.18.4.22, 9.19.1.28, 9.20.2.10, 9.22.1.1 24.10.2024 SB2024102402
#VU99291 - Missing Release of Resource after Effective Lifetime
CVE-2024-20481
CWE-772 High
No
Exploited
9.16.4.62, 9.17.1.45, 9.18.4.29, 9.19.1.37, 9.20.2.22, 9.22.1.1 23.10.2024 SB2024102373
#VU99289 - Access of Memory Location After End of Buffer
CVE-2024-20402
CWE-788 Medium
No
No
9.16.4.62, 9.18.4.34, 9.20.1, 9.22.1.1 23.10.2024 SB2024102366


Showing elements 21 - 40 out of 144