Cisco Adaptive Security Appliance (AS IPsec Denial of Service Vulnerability

According to its self-reported version, the Cisco Adaptive Security Appliance ASA Software is affected by the following vulnerability : - A vulnerability in the software cryptography module of the Cisco Adaptive Security Virtual Appliance ASAv and Firepower 2100 Series running Cisco Adaptive...

The vulnerability of the implementation of the Open Shortest Path First (OSPF) protocol in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) software allows a attacker to induce a service failure.

The vulnerability of the OSPF implementation in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Image Signature Verification function in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) microprogramming systems allows attackers to compromise the integrity of protected information.

The vulnerability of the Image Signature Verification function in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software relates to improper verification of cryptographic signatures. Exploiting this vulnerability can allow a malicious actor to compromise the...

The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows attackers to gain unauthorized access to protected information.

The vulnerability of the web interface of Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD lies in memory object processing errors. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance (ASA) microprogramming software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance ASA microprogramming software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the web interface of Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD lies in the lack of pathname checking for access-controlled directories. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

The vulnerability in the processing of DNS packets through the IPv6 protocol of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of DNS packet processing through the IPv6 protocol on Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD devices is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptio...

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammable network devices from Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammed network devices of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor...

Cisco Adaptive Security Appliance Software IKEv1 DoS (cisco-sa-asa-dos-BqYFRJt9)

A vulnerability exists in the Internet Key Exchange version 1 IKEv1 feature of Cisco Adaptive Security Appliance ASA Software due to improper management of system memory. An unauthenticated, remote attacker can exploit this, by sending malicious IKEv1 traffic to an affected device, in order to...

SAP Adaptive Server Enterprise Information Disclosure Vulnerability (CNVD-2020-29753)

SAP Adaptive Server Enterprise is a relational database server from SAP. An information disclosure vulnerability exists in SAP Adaptive Server Enterprise. An attacker could exploit this vulnerability to obtain account credentials, manipulate system data, and impact system availability...

SAP Adaptive Server Enterprise Authorization Issues Vulnerability

SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. SAP Adaptive Server Enterprise has an authorization issue vulnerability that stems from a lack of authorization checking. An attacker could exploit the vulnerability to access information...

SAP Adaptive Server Enterprise SQL Injection Vulnerability (CNVD-2020-29747)

SAP Adaptive Server Enterprise is a relational database server from SAP. A SQL injection vulnerability exists in SAP Adaptive Server Enterprise. An attacker can exploit this vulnerability by executing specially crafted database query statements to elevate privileges...

SAP Adaptive Server Enterprise Information Disclosure Vulnerability (CNVD-2020-29752)

SAP Adaptive Server Enterprise is a relational database server from SAP. An information disclosure vulnerability exists in SAP Adaptive Server Enterprise. An attacker could exploit this vulnerability to read the system administrator password via certain misconfigured endpoints that are publicly...

SAP Adaptive Server Enterprise Input Validation Error Vulnerability

SAP Adaptive Server Enterprise is a relational database server from SAP. An input validation error vulnerability exists in SAP Adaptive Server Enterprise, which arises when the program does not perform the required validation checks on an authenticated user. An attacker could exploit this...

SAP Adaptive Server Enterprise Injection Vulnerability

SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. An injection vulnerability exists in SAP Adaptive Server Enterprise, which originates when the program does not perform the required authentication checks on an authenticated user. An attacker could exploit the...

SAP Adaptive Server Enterprise SQL Injection Vulnerability (CNVD-2020-29750)

SAP Adaptive Server Enterprise is a relational database server from SAP. A SQL injection vulnerability exists in SAP Adaptive Server Enterprise. An attacker could exploit this vulnerability by executing specially crafted query statements to elevate privileges, modify database objects, or execute...

CVE-2020-6250

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...

CVE-2020-6259

Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access information which would otherwise be restricted leading to Missing Authorization Check...

CVE-2020-6248

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

CVE-2020-6252

Under certain conditions SAP Adaptive Server Enterprise Cockpit, version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact syst...