Known vulnerabilities in Cisco Adaptive Security Appliance (ASA) - page 4

Software CPE: cpe:2.3:h:cisco_systems:asa:*:*:*:*:*:*:*:*
Total vulnerabilities: 144
Public exploits: 7
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) is affected by 144 known vulnerabilities: 2 critical, 22 high, 87 medium, 33 low Critical High Medium Low

Vulnerabilities (144)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69199 - Memory corruption
CVE-2022-20927
CWE-119 Medium
No
No
006.006(007), 007.000(002), 007.002(000), 9.14.4, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5 10.11.2022 SB2022111012
#VU69198 -
CVE-2022-20826
Low
No
No
1.0.22, 1.2.17, 9.17.1.15, 9.18.2 10.11.2022 SB2022111007
#VU66392 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-20713
CWE-444 Low
No
No
9.17.1 11.08.2022 SB2022081103
#VU66391 - Observable discrepancy
CVE-2022-20866
CWE-203 Medium
Available
No
9.16.3.19, 9.17.1.13, 9.18.2 11.08.2022 SB2022081104
#VU64596 - Insufficient Verification of Data Authenticity
CVE-2022-20829
CWE-345 Medium
Available
No
9.18.2 22.06.2022 SB2022062234
#VU62670 - Incorrect Privilege Assignment
CVE-2022-20759
CWE-266 Medium
No
No
9.8.4.43, 9.12.4.38, 9.14.4, 9.15.1.21, 9.16.2.13, 9.17.1.7 27.04.2022 SB2022042739
#VU62669 - Missing Required Cryptographic Step
CVE-2022-20742
CWE-325 Medium
No
No
9.12.4.37, 9.14.3.13, 9.15.1.21, 9.16.2.7 27.04.2022 SB2022042739
#VU62668 - Resource exhaustion
CVE-2022-20760
CWE-400 Medium
No
No
9.12.4.38, 9.14.4, 9.15.1.21, 9.16.2.14, 9.17.1.7 27.04.2022 SB2022042739
#VU62667 - Improper input validation
CVE-2022-20745
CWE-20 Medium
No
No
9.12.4.35, 9.14.3.13, 9.15.1.21, 9.16.2.7 27.04.2022 SB2022042739
#VU62666 - Resource Management Errors
CVE-2022-20715
CWE-399 Medium
No
No
9.16.2.11, 9.17.1 27.04.2022 SB2022042737
SB2022042738
#VU62665 - Heap-based Buffer Overflow
CVE-2022-20737
CWE-122 Medium
No
No
9.12.4.38, 9.14.4, 9.15.1.21, 9.16.2.14, 9.17.1.7 27.04.2022 SB2022042736
#VU62471 - Insufficient Verification of Data Authenticity
CVE-2022-20795
CWE-345 Medium
No
No
- 21.04.2022 SB2022042128
#VU57798 - Memory corruption
CVE-2021-34783
CWE-119 Medium
No
No
9.16.2 29.10.2021 SB2021102915
#VU57797 - Improperly Implemented Security Check for Standard
CVE-2021-34791
CWE-358 Medium
No
No
9.8.4.40, 9.12.4.18, 9.14.2.15, 9.15.1.15 29.10.2021 SB2021102916
#VU57796 - Improperly Implemented Security Check for Standard
CVE-2021-34790
CWE-358 Medium
No
No
9.8.4.40, 9.12.4.18, 9.14.2.15, 9.15.1.15 29.10.2021 SB2021102916
#VU57769 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1444
CWE-79 Medium
No
No
9.8.4.40, 9.12.4.26, 9.14.3, 9.15.1.17, 9.16.1.28 29.10.2021 SB2021102902
#VU57768 - Improper Access Control
CVE-2021-34794
CWE-284 Low
No
No
9.14.2.4, 9.15.1.7 29.10.2021 SB2021102901
#VU57767 - Permissions, Privileges, and Access Controls
CVE-2021-34787
CWE-264 Medium
No
No
9.8.4.40, 9.12.4.25, 9.14.3.1, 9.15.1.17, 9.16.1.28 28.10.2021 SB2021102809
#VU57759 - Use After Free
CVE-2021-40125
CWE-416 Medium
No
No
9.8.4.40, 9.12.4.30, 9.14.3.9, 9.15.1.17, 9.16.2 28.10.2021 SB2021102807
#VU57758 - Memory corruption
CVE-2021-40117
CWE-119 Medium
No
No
9.8.4.40, 9.12.4.26, 9.14.3.9, 9.15.1.17 28.10.2021 SB2021102806


Showing elements 61 - 80 out of 144