The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows a perpetrator to carry out a cross-site scripting attack.

🗓️ 19 Nov 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Cross-site scripting flaw on Cisco WebVPN and AnyConnect interfaces in Firepower Threat Defense and Adaptive Security Appliance due to weak web page protection.

Reporter	Title	Published	Views	Family All 34
ATTACKERKB	CVE-2020-3580	21 Oct 202000:00	–	attackerkb
Information Security Automation	Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee	28 Jun 202110:59	–	avleonov
GithubExploit	Exploit for CVE-2025-0133	6 May 202623:51	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Cisco Firepower_Threat_Defense	25 Jun 202104:39	–	githubexploit
Circl	CVE-2020-3580	29 Apr 202104:00	–	circl
CISA KEV Catalog	Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability	3 Nov 202100:00	–	cisa_kev
Tenable Nessus	Cisco Adaptive Security Appliance Software Multiple Vulnerabilities (cisco-sa-asaftd-xss-multiple-FCB3vPZe)	24 Jun 202100:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software Web Services Interface Multiple Vulnerabilities (cisco-sa-asaftd-xss-multiple-FCB3vPZe)	24 Jun 202100:00	–	nessus
Tenable Nessus	Cisco ASA Software and FTD Software Web Services Interface XSS (cisco-sa-asaftd-xss-multiple-FCB3vPZe) (Direct Check)	7 Jul 202100:00	–	nessus
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities	21 Oct 202016:00	–	cisco