CVE-2018-0296

CVE-2018-0296 affects Cisco ASA and related FTD/FTD-based offerings, where an improper input validation of HTTP URLs in the web interface allows unauthenticated remote access to trigger DoS (device reload) or, on some releases, expose sensitive information via directory traversal. Public referenc...

CVE-2020-3578

CVE-2020-3578 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) web services interface. The issue is an insufficient validation of URLs in portal access rules, enabling an unauthenticated, remote attacker to bypass a configured access rule and reach parts of the WebVPN portal that should...

CVE-2020-3582

CVE-2020-3582 involves multiple XSS vulnerabilities in the web services interface of Cisco ASA and Firepower Threat Defense (FTD) software. The root cause is insufficient validation of user-supplied input in the device’s web interface, allowing an unauthenticated, remote attacker to persuade a us...

CVE-2020-3583

CVE-2020-3583 describes cross-site scripting vulnerabilities in Cisco ASA/FTD Web Services interface due to insufficient validation of user input. A remote, unauthenticated attacker could entice a user to click a crafted link to execute arbitrary script in the interface context or access browser-...

CVE-2020-3581

CVE-2020-3581 covers multiple cross-site scripting (XSS) vulnerabilities in the web services interface of Cisco ASA and FTD software. The flaws arise from insufficient validation of user-supplied input in the web services interface, allowing an unauthenticated, remote attacker to persuade a user ...

CVE-2018-15383

Cisco ASA and Firepower Threat Defense (FTD) software are affected by CVE-2018-15383 due to a vulnerability in the cryptographic hardware accelerator driver. The issue arises from limited DMA memory and improper handling of resources under low-memory conditions, which an unauthenticated remote at...

CVE-2020-3585

The CVE-2020-3585 issue affects Cisco ASA/FTD software for Cisco Firepower 1000 Series and is due to improper countermeasures against the Bleichenbacher RSA-TLS vulnerability in the TLS handler. An unauthenticated remote attacker could exploit crafted TLS messages to make the device act as an ora...

CVE-2017-6632

Cisco FirePOWER System Software SSL Logging DoS (CVE-2017-6632) affects 5.3.0–6.2.2 when SSL policy logging is enabled. An unauthenticated remote attacker can cause a DoS by sending a flood of crafted TCP packets, due to mis‑configurable SSL logging of certain TCP traffic. Impact is high availabi...

CVE-2020-3457

Cisco FXOS Software CLI vulnerability allows an authenticated, local attacker to inject arbitrary commands due to insufficient input validation. The issue affects the CLI command handling and could lead to execution of OS commands with root privileges. Cisco and related advisories (and Nessus plu...