Known vulnerabilities in Cisco Firewall Threat Defense (FTD) - page 6

Software CPE: cpe:2.3:h:cisco_systems:cisco_ftd:*:*:*:*:*:*:*:*
Total vulnerabilities: 204
Public exploits: 6
Known exploited (KEV): 13
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Firewall Threat Defense (FTD) Cisco Firewall Threat Defense (FTD) is affected by 204 known vulnerabilities: 3 critical, 33 high, 119 medium, 49 low Critical High Medium Low

Vulnerabilities (204)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69203 - Allocation of Resources Without Limits or Throttling
CVE-2022-20950
CWE-770 Medium
No
No
7.2.1 10.11.2022 SB2022111024
#VU69202 - Memory corruption
CVE-2022-20947
CWE-119 High
No
No
006.004(000.015), 006.006(007), 007.000(002), 007.002(000), 009.008(004.044), 9.8.4.45, 9.8.4.46, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.14.4, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5 10.11.2022 SB2022111015
#VU69201 - Incorrect Authorization
CVE-2022-20928
CWE-863 Medium
No
No
006.004(000.015), 006.006(007), 007.000(002), 007.002(000), 9.8.4.46, 009.008(004.046), 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5, 009.019(000.099) 10.11.2022 SB2022111016
#VU69200 - Improper Check or Handling of Exceptional Conditions
CVE-2022-20924
CWE-703 Medium
No
No
006.006(007), 007.000(004), 007.002(001), 9.14.4.13, 009.014(004.013), 9.14.4.14, 9.14.4.15, 9.14.4.17, 009.016(003.015), 9.16.3.19, 9.16.3.23, 009.016(003.099), 009.016(004), 9.16.4, 009.017(001.017), 9.17.1.20, 009.018(001.003), 009.018(001.099), 9.18.2, 009.018(002), 9.18.2.5, 009.019(000.099), 099.014(004.026), 099.017(002.138), 099.018(002.027), 099.018(028.006), 099.018(030.074), 099.019(001.112), 099.019(021.034), 099.019(022.033), 099.019(023.030), 099.019(030.003), 099.020(000.002) 10.11.2022 SB2022111014
#VU69199 - Memory corruption
CVE-2022-20927
CWE-119 Medium
No
No
006.006(007), 007.000(002), 007.002(000), 9.14.4, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5 10.11.2022 SB2022111012
#VU69198 -
CVE-2022-20826
Low
No
No
1.0.22, 1.2.17, 7.1.0.2, 7.2.1 10.11.2022 SB2022111007
#VU66391 - Observable discrepancy
CVE-2022-20866
CWE-203 Medium
Available
No
Cisco_FTD_SSP_FP1K_Hotfix_P-7.1.0.2-2.sh.REL.tar, Cisco_FTD_SSP_FP2K_Hotfix_P-7.1.0.2-2.sh.REL.tar, Cisco_FTD_SSP_Hotfix_P-7.1.0.2-2.sh.REL.tar, Cisco_FTD_Hotfix_P-7.1.0.2-2.sh.REL.tar, Cisco_FTD_SSP_FP3K_Hotfix_Q-7.1.0.3-2.sh.REL.tar, 7.0.4, 7.2.0.1 11.08.2022 SB2022081104
#VU62687 - Resource Management Errors
CVE-2022-20767
CWE-399 High
No
No
7.0.2, 7.1.0.1 28.04.2022 SB2022042814
#VU62686 - Improper control of a resource through its lifetime
CVE-2022-20748
CWE-664 Medium
No
No
7.0.1 28.04.2022 SB2022042813
#VU62685 - Allocation of Resources Without Limits or Throttling
CVE-2022-20757
CWE-770 High
No
No
Cisco_FTD_SSP_FP1K_Hotfix_AA-6.7.0.4-2.sh.REL.tar, Cisco_FTD_SSP_FP2K_Hotfix_AA-6.7.0.4-2.sh.REL.tar, Cisco_FTD_SSP_Hotfix_AA-6.7.0.4-2.sh.REL.tar, Cisco_FTD_Hotfix_AA-6.7.0.4-2.sh.REL.tar, 6.4.0.15, 6.6.5.2, 7.0.2, 7.1.0.1 28.04.2022 SB2022042812
#VU62684 - Improper Handling of Unexpected Data Type
CVE-2022-20730
CWE-241 Low
No
No
6.4.0.15, 6.6.5.2, 7.0.2 28.04.2022 SB2022042815
#VU62683 - Allocation of Resources Without Limits or Throttling
CVE-2022-20751
CWE-770 High
No
No
6.4.0.15, 6.6.3 28.04.2022 SB2022042816
#VU62682 - NULL Pointer Dereference
CVE-2022-20746
CWE-476 High
No
No
7.0.1 28.04.2022 SB2022042813
#VU62681 - XML Injection
CVE-2022-20729
CWE-91 Low
No
No
6.4.0.15, 6.6.5.2, 7.0.2 28.04.2022 SB2022042815
#VU62670 - Incorrect Privilege Assignment
CVE-2022-20759
CWE-266 Medium
No
No
6.4.0.15, 6.6.5.2, 6.7.0.4, 7.0.2, 7.1.0.1 27.04.2022 SB2022042739
#VU62669 - Missing Required Cryptographic Step
CVE-2022-20742
CWE-325 Medium
No
No
6.4.0.13, 6.6.5.1, 6.7.0.4, 7.0.2 27.04.2022 SB2022042739
#VU62668 - Resource exhaustion
CVE-2022-20760
CWE-400 Medium
No
No
6.4.0.15, 6.6.5.2, 6.7.0.4, 7.0.2, 7.1.0.1 27.04.2022 SB2022042739
#VU62667 - Improper input validation
CVE-2022-20745
CWE-20 Medium
No
No
6.4.0.13, 6.6.5.1, 6.7.0.4 27.04.2022 SB2022042739
#VU62666 - Resource Management Errors
CVE-2022-20715
CWE-399 Medium
No
No
6.4.0.13, 6.6.5.2, 6.7.0.4, 7.1.0.1 27.04.2022 SB2022042737
SB2022042738
#VU62471 - Insufficient Verification of Data Authenticity
CVE-2022-20795
CWE-345 Medium
No
No
- 21.04.2022 SB2022042128


Showing elements 101 - 120 out of 204