Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoAdaptive Security Appliance Software

24 matches found

CVE
CVE•added 2014/03/19 1:15 a.m.•181 views

CVE-2014-2120

Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

6.1CVSS5.9AI score0.80116EPSS
CVE
CVE•added 2014/04/10 4:34 a.m.•78 views

CVE-2014-2127

Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3) does not properly process management-session information during privilege validation for SSL VPN portal connections, w...

8.5CVSS7.7AI score0.30946EPSS
CVE
CVE•added 2014/10/05 1:55 a.m.•60 views

CVE-2014-3398

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain potentially sensitive software-version information by reading the verbose response data that is provided for a request to an unspecified URL, aka Bug ID CSCuq65542.

5CVSS6.3AI score0.009EPSS
CVE
CVE•added 2014/04/10 4:34 a.m.•59 views

CVE-2014-2128

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40), 8.4 before 8.4(7.3), 8.6 before 8.6(1.13), 9.0 before 9.0(3.8), and 9.1 before 9.1(3.2) allows remote attackers to bypass authentication via (1) a crafted cookie value within mo...

5CVSS7.9AI score0.00248EPSS
CVE
CVE•added 2014/05/07 10:55 a.m.•56 views

CVE-2014-2181

Cisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551.

6.8CVSS6.3AI score0.00309EPSS
CVE
CVE•added 2014/10/07 10:55 a.m.•55 views

CVE-2014-3399

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during creation of a SharePoint handler, which allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs, and con...

5.5CVSS6.7AI score0.00115EPSS
CVE
CVE•added 2014/06/18 4:55 p.m.•52 views

CVE-2014-2151

The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520.

4CVSS5.8AI score0.00315EPSS
CVE
CVE•added 2014/04/10 4:34 a.m.•47 views

CVE-2014-2126

Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and 9.1 before 9.1(3.4) allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496.

8.5CVSS7.8AI score0.00535EPSS
CVE
CVE•added 2014/10/10 10:55 a.m.•46 views

CVE-2014-3392

The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows remote attackers to obtain sensitive information from process m...

8.3CVSS6.2AI score0.00489EPSS
CVE
CVE•added 2014/11/28 2:59 a.m.•46 views

CVE-2014-3407

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCuq68888.

5CVSS6.7AI score0.00381EPSS
CVE
CVE•added 2014/07/14 9:55 p.m.•45 views

CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote CIFS servers to cause a denial of service (device reload) via a long share list, aka Bug ID CSCuj83344.

6.8CVSS6.8AI score0.00726EPSS
CVE
CVE•added 2014/02/22 9:55 p.m.•45 views

CVE-2014-0738

The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66770.

4.3CVSS7.2AI score0.00098EPSS
CVE
CVE•added 2014/10/10 10:55 a.m.•44 views

CVE-2014-3393

The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.14), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), and 9.2 before 9.2(2.4) does not properly implement authentication, which allows remote att...

4.3CVSS6.1AI score0.00785EPSS
CVE
CVE•added 2014/04/29 10:37 a.m.•41 views

CVE-2014-2182

Cisco Adaptive Security Appliance (ASA) Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 packet, aka Bug ID CSCun45520.

6.1CVSS6.8AI score0.00575EPSS
CVE
CVE•added 2014/05/20 11:13 a.m.•40 views

CVE-2014-3264

Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561.

6.3CVSS6.5AI score0.00296EPSS
CVE
CVE•added 2014/12/20 12:59 a.m.•40 views

CVE-2014-3410

The syslog-management subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then (1) sniffing the network for a syslog message or (2) reading a syslog message in a file on a syslo...

4.3CVSS7AI score0.00375EPSS
CVE
CVE•added 2014/04/23 11:52 a.m.•39 views

CVE-2014-2154

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and instability) via crafted SIP packets, aka Bug ID CSCuf67469.

5CVSS6.8AI score0.00918EPSS
CVE
CVE•added 2014/10/10 10:55 a.m.•39 views

CVE-2014-3391

Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to library use after device reload because of an incorrect LD_LIBRARY_PATH value, aka B...

6.8CVSS6.5AI score0.00095EPSS
CVE
CVE•added 2014/10/10 10:55 a.m.•39 views

CVE-2014-3394

The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug...

5CVSS6.9AI score0.00091EPSS
CVE
CVE•added 2014/02/22 9:55 p.m.•38 views

CVE-2014-0739

Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass sec_db authentication and provide certain pass-through services to untrusted devices via a crafted configuration-file TFTP request, aka Bug ID CSCuj6...

4.3CVSS7.2AI score0.00184EPSS
CVE
CVE•added 2014/10/10 10:55 a.m.•38 views

CVE-2014-3390

The Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software 8.7 before 8.7(1.14), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows local users to obtain Linux root access by leveraging administrative privileges and executing a crafted script, aka Bug IDs CSCuq41510 a...

6.8CVSS6.2AI score0.00324EPSS
CVE
CVE•added 2014/12/18 4:59 p.m.•38 views

CVE-2014-8012

Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695.

4.3CVSS5.8AI score0.00296EPSS
CVE
CVE•added 2014/07/14 9:55 p.m.•37 views

CVE-2013-5567

Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service (traffic loop and device crash) via a packet that triggers multiple matches, aka...

5.4CVSS6.9AI score0.015EPSS
CVE
CVE•added 2014/04/10 4:34 a.m.•37 views

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted SIP packets, aka Bug ID CSCuh4...

7.1CVSS7.7AI score0.00399EPSS