Class familyCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Cisco ASA input validation flaws, 2018–2026
12 Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) CVEs with CWE-20 weaknesses, 7 Jun 2018 to 4 Mar 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
3 2018’18
4 2019’19
2 2020’20
2021’21
1 2022’22
2023’23
1 2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
20183 CVEs, 1 in KEV
20194 CVEs
20202 CVEs, 1 in KEV
20221 CVE
20241 CVE
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2018-0296KEV | 7 Jun 2018 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | Grouped by weakness | 72.1 |
| CVE-2018-0472 | 5 Oct 2018 | Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability | Grouped by weakness | 19.4 |
| CVE-2018-15454 | 1 Nov 2018 | Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability | Grouped by weakness | 59.9 |
| CVE-2019-1687 | 3 May 2019 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software TCP Proxy Denial of Service… | Grouped by weakness | 22.2 |
| CVE-2019-1694 | 3 May 2019 | Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of… | Grouped by weakness | 23.0 |
| CVE-2019-1697 | 3 May 2019 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol… | Grouped by weakness | 21.0 |
| CVE-2019-12676 | 2 Oct 2019 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA Processing Denial of Service… | Grouped by weakness | 13.9 |
| CVE-2020-3191 | 6 May 2020 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service… | Grouped by weakness | 21.9 |
| CVE-2020-3452KEV | 22 Jul 2020 | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | Grouped by weakness | 68.2 |
| CVE-2022-20745 | 3 May 2022 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of… | Grouped by weakness | 20.9 |
| CVE-2024-20495 | 23 Oct 2024 | A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco… | Grouped by weakness | 14.8 |
| CVE-2026-20020 | 4 Mar 2026 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow… | Grouped by weakness | 8.6 |