Known vulnerabilities in Cisco Firewall Threat Defense (FTD) - page 5

Software CPE: cpe:2.3:h:cisco_systems:cisco_ftd:*:*:*:*:*:*:*:*
Total vulnerabilities: 204
Public exploits: 6
Known exploited (KEV): 13
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Firewall Threat Defense (FTD) Cisco Firewall Threat Defense (FTD) is affected by 204 known vulnerabilities: 3 critical, 33 high, 119 medium, 49 low Critical High Medium Low

Vulnerabilities (204)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82679 - Improper input validation
CVE-2023-20086
CWE-20 High
No
No
9.12.4.56, 9.12.4.58, 9.12.4.62, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.30, 9.17.1.33, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110228
#VU82678 - Improper input validation
CVE-2023-20244
CWE-20 High
No
No
9.12.4.58, 9.16.4.19, 9.16.4.27, 9.18.3.39, 9.18.3.46, 9.19.1.12 02.11.2023 SB2023110227
#VU82677 - Improper input validation
CVE-2023-20270
CWE-20 Medium
No
No
3.1.21.400, 7.2.4 02.11.2023 SB2023110226
#VU82676 - Business Logic Errors (3.0)
CVE-2023-20031
CWE-840 Low
No
No
7.0.6, 7.2.1, 7.3.0 02.11.2023 SB2023110224
#VU82675 - Business Logic Errors (3.0)
CVE-2023-20070
CWE-840 Low
No
No
7.2.1, 7.3.0 02.11.2023 SB2023110220
#VU82674 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20063
CWE-78 Low
No
No
7.0.6, 7.2.4, 7.3.0 02.11.2023 SB2023110218
#VU82670 - Business Logic Errors (3.0)
CVE-2023-20256
CWE-840 Medium
No
No
9.12.4.58, 9.12.4.62, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110208
#VU82669 - Business Logic Errors (3.0)
CVE-2023-20245
CWE-840 Medium
No
No
9.12.4.58, 9.12.4.62, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110208
#VU82664 - Business Logic Errors (3.0)
CVE-2023-20177
CWE-840 Low
No
No
7.0.6, 7.2.4 02.11.2023 SB2023110203
#VU80521 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-20269
CWE-288 High
No
Exploited
9.16.4.38 07.09.2023 SB2023090728
#VU77080 - Improper input validation
CVE-2023-20006
CWE-20 Medium
No
No
- 07.06.2023 SB2023060741
#VU73980 - Improper input validation
CVE-2023-20081
CWE-20 Medium
No
No
- 23.03.2023 SB2023032325
#VU73975 - Key Management Errors
CVE-2023-20107
CWE-320 Medium
No
No
6.4.0 23.03.2023 SB2023032326
#VU69245 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CVE-2022-20943
CWE-244 Medium
No
No
- 11.11.2022 SB2022111122
#VU69244 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CVE-2022-20922
CWE-244 Medium
No
No
- 11.11.2022 SB2022111121
#VU69242 - Resource exhaustion
CVE-2022-20854
CWE-400 Medium
No
No
6.6.7, 7.1.0 11.11.2022 SB2022111115
#VU69207 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20934
CWE-78 Low
No
No
2.3.1.230, 002.006(001.255), 2.6.1.259, 2.8.1.186, 002.008(001.189), 2.8.1.190, 002.010(001.195), 002.010(001.196), 2.10.1.207, 002.011(001.163), 2.11.1.182, 2.12.0.31, 002.012(000.423), 2.12.0.432, 2.12.0.438, 2.12.0.450, 7.2.1, 007.002(001), 009.012(004.052), 009.014(004.017), 009.016(003.099), 009.016(004), 082.013(000.251) 10.11.2022 SB2022111027
#VU69206 - Heap-based Buffer Overflow
CVE-2022-20946
CWE-122 High
No
No
006.006(007), 007.000(004), 007.002(001), 009.012(004.042), 9.12.4.48, 9.12.4.50, 9.12.4.52, 009.014(004.008), 9.14.4.13, 9.14.4.14, 009.016(003.015), 9.16.3.19, 9.16.3.23, 009.016(003.099), 9.16.4, 009.016(004), 009.017(001.010), 9.17.1.13, 9.17.1.15, 009.018(000.108), 9.18.1, 009.018(001), 009.018(001.099), 009.018(002), 9.18.2, 9.18.2.5, 009.019(000.099), 099.012(004.055), 099.014(004.023), 099.016(004.023), 099.017(002.135), 099.017(028.079), 099.018(002.007), 099.018(030.062), 099.019(001.080), 099.019(021.020), 099.019(022.024), 099.019(023.018), 099.019(030.002) 10.11.2022 SB2022111028
#VU69205 - Resource Management Errors
CVE-2022-20949
CWE-399 Low
No
No
006.006(007), 007.000(004), 007.002(001), 009.008(004.046), 009.012(004.051), 9.12.4.52, 9.14.4.13, 009.014(004.013), 9.14.4.14, 009.016(003.016), 9.16.3.19, 9.16.3.23, 009.016(003.099), 009.016(004), 009.017(001.017), 009.018(001.099), 009.018(002), 9.18.2, 009.019(000.099), 099.014(004.027), 099.017(002.139), 099.018(002.032), 099.019(001.129), 099.019(021.038), 099.019(022.035), 099.020(000.006) 10.11.2022 SB2022111026
#VU69204 - Observable discrepancy
CVE-2022-20940
CWE-203 Medium
No
No
006.004(000.015), 006.006(007), 007.000(004), 007.002(000), 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.14.4.13, 9.14.4.14, 009.016(003.012), 9.16.3.19, 9.16.3.23, 009.016(003.099), 009.016(004), 9.16.4, 009.017(001.010), 9.17.1.11, 9.17.1.13, 9.17.1.15, 009.018(001), 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 009.019(000.099), 099.017(028.079), 099.019(030.002) 10.11.2022 SB2022111025


Showing elements 81 - 100 out of 204