Known vulnerabilities in Cisco Adaptive Security Appliance (ASA) - page 6

Software CPE: cpe:2.3:h:cisco_systems:asa:*:*:*:*:*:*:*:*
Total vulnerabilities: 144
Public exploits: 7
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) is affected by 144 known vulnerabilities: 2 critical, 22 high, 87 medium, 33 low Critical High Medium Low

Vulnerabilities (144)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47938 - Use of Uninitialized Variable
CVE-2020-27124
CWE-457 Medium
No
No
9.14.1.15 27.10.2020 SB2020102714
#VU47881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3583
CWE-79 Low
No
No
9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 22.10.2020 SB2020102209
#VU47880 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3582
CWE-79 Low
No
No
9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 22.10.2020 SB2020102209
#VU47879 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3581
CWE-79 Low
No
No
9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 22.10.2020 SB2020102209
#VU47878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3580
CWE-79 Low
Available
Exploited
9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 21.10.2020 SB2020102209
#VU47882 - Resource exhaustion
CVE-2020-3304
CWE-400 Medium
No
No
9.6.4.45, 9.8.4.22, 9.9.2.80, 9.10.1.44, 9.12.3.12, 9.13.1.12, 9.14.1.10 21.10.2020 SB2020102210
#VU47883 - Improper Authorization
CVE-2020-3578
CWE-285 Medium
No
No
9.6.4.45, 9.8.4.26, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.19 21.10.2020 SB2020102208
#VU47884 - Resource exhaustion
CVE-2020-3529
CWE-400 Medium
No
No
9.6.4.45, 9.8.4.29, 9.9.2.80, 9.10.1.44, 9.12.4.4, 9.13.1.13, 9.14.1.30 21.10.2020 SB2020102211
#VU47885 - Resource exhaustion
CVE-2020-3528
CWE-400 Medium
No
No
9.6.4.45, 9.8.4.22, 9.9.2.80, 9.10.1.44, 9.12.4.2, 9.13.1.12, 9.14.1.15 21.10.2020 SB2020102212
#VU47886 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-3561
CWE-93 Medium
No
No
9.6.4.35, 9.8.4.20, 9.9.2.80, 9.10.1.43, 9.12.3.9, 9.13.1.10, 9.14.1.10 21.10.2020 SB2020102213
#VU31817 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3452
CWE-22 Medium
Available
Exploited
9.6.4.42, 9.8.4.20, 9.9.2.74, 9.10.1.42, 9.12.3.12, 9.13.1.10, 9.14.1.10 24.07.2020 SB2020072420
SB2024081426
#VU27687 - Resource Management Errors
CVE-2020-3334
CWE-399 Low
No
No
9.10.1.37, 9.12.3, 9.13.1.2 11.05.2020 SB2020051142
#VU27600 - Out-of-bounds read
CVE-2020-3298
CWE-125 Medium
No
No
9.6.4.40, 9.8.4.17, 9.9.2.66, 9.10.1.37, 9.12.3.7, 9.13.1.7 07.05.2020 SB2020050719
#VU27598 - Resource exhaustion
CVE-2020-3195
CWE-400 High
No
No
9.12.3.2, 9.13.1.7 07.05.2020 SB2020050718
#VU27597 - Resource exhaustion
CVE-2020-3196
CWE-400 High
No
No
9.6.4.40, 9.8.4.20, 9.9.2.66, 9.10.1.37, 9.12.3.2, 9.13.1.7 07.05.2020 SB2020050717
#VU27596 - Resource exhaustion
CVE-2020-3306
CWE-400 Medium
No
No
9.6.4.34, 9.8.4.10, 9.10.1.30, 9.12.3 07.05.2020 SB2020050716
#VU27595 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3259
CWE-200 High
No
Exploited
9.8.4.20, 9.9.2.67, 9.10.1.39, 9.12.3.9, 9.13.1.10 07.05.2020 SB2020050715
#VU27594 - Improper input validation
CVE-2020-3191
CWE-20 High
No
No
9.6.4.36, 9.8.4.12, 9.9.2.66, 9.10.1.37, 9.12.2.9 07.05.2020 SB2020050714
#VU27593 - Resource exhaustion
CVE-2020-3254
CWE-400 High
No
No
9.6.4.34, 9.8.4.7, 9.9.2.66, 9.10.1.27, 9.12.2.1 07.05.2020 SB2020050713
#VU27592 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3187
CWE-22 High
Available
No
9.6.4.40, 9.8.4.15, 9.9.2.66, 9.10.1.37, 9.12.3.2, 9.13.1.7 07.05.2020 SB2020050711


Showing elements 101 - 120 out of 144