Known vulnerabilities in Cisco ASA 5500-X Series

Software CPE: cpe:2.3:h:cisco_systems:cisco_asa_5500-x_series:*:*:*:*:*:asa:*:*
Total vulnerabilities: 22
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco ASA 5500-X Series Cisco ASA 5500-X Series is affected by 22 known vulnerabilities: 2 critical, 1 high, 5 medium, 14 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69199 - Memory corruption
CVE-2022-20927
CWE-119 Medium
No
No
- 10.11.2022 SB2022111012
#VU15667 - Improper input validation
CVE-2018-15454
CWE-20 High
No
Exploited
- 01.11.2018 SB2018110101
#VU13246 - Relative Path Traversal
CVE-2018-0296
CWE-23 Medium
Available
Exploited
- 06.06.2018 SB2018060810
SB2018070402
#VU12092 - Improper Certificate Validation
CVE-2018-0227
CWE-295 Low
No
No
- 23.04.2018 SB2018042304
SB2018070402
#VU12091 - Resource exhaustion
CVE-2018-0228
CWE-400 Low
No
No
- 23.04.2018 SB2018042304
SB2018070402
#VU12089 - Business Logic Errors (3.0)
CVE-2018-0240
CWE-840 Low
No
No
- 23.04.2018 SB2018042304
SB2018070402
#VU12088 - Session Fixation
CVE-2018-0229
CWE-384 Low
No
No
- 23.04.2018 SB2018042304
SB2018042313
#VU12082 - Resource exhaustion
CVE-2018-0230
CWE-400 Low
No
No
- 23.04.2018 SB2018042304
#VU12086 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0251
CWE-79 Low
No
No
- 18.04.2018 SB2018042304
#VU12087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0242
CWE-79 Low
No
No
- 18.04.2018 SB2018042304
#VU12090 - Buffer Underwrite ('Buffer Underflow')
CVE-2018-0231
CWE-124 Low
No
No
- 18.04.2018 SB2018042304
SB2018070402
#VU10328 - Double Free
CVE-2018-0101
CWE-415 Critical
Available
No
- 29.01.2018 SB2018012914
#VU7677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6765
CWE-79 Low
No
No
- 03.08.2017 SB2017080306
#VU7676 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6764
CWE-79 Low
No
No
- 03.08.2017 SB2017080306
#VU7675 - Exposure of sensitive information to an unauthorized actor
CVE-2017-6752
CWE-200 Low
No
No
- 03.08.2017 SB2017080306
#VU7645 - Permissions, Privileges, and Access Controls
CVE-2017-6770
CWE-264 Low
No
No
- 01.08.2017 SB2017072703
SB2017072704
SB2017072705
#VU6311 - Improper input validation
CVE-2017-6609
CWE-20 Medium
No
No
- 19.04.2017 SB2017041903
#VU6312 - Memory corruption
CVE-2017-6607
CWE-119 Medium
No
No
- 19.04.2017 SB2017041904
#VU1047 - Resource Management Errors
CVE-2016-6439
CWE-399 Low
No
No
- 19.10.2016 SB2016101917
SB2024072244
#VU778 - Resource Management Errors
CVE-2016-6424
CWE-399 Low
No
No
- 06.10.2016 SB2016100609


Showing elements 1 - 20 out of 22