Skip to content
Patcharo

Cisco

Secure Firewall ASA vulnerabilities (CVE): affected branches, fixed releases, CISA KEV

Affected branches, fixed releases stated by the vendor and known exploitation for Cisco Secure Firewall ASA.

Sources last modified 16 Sept 2026 · Last verified by Patcharo: 1 Oct 2026 at 13:37 UTC

11
CVEs tracked
2
Critical
11
CISA KEV
5
With a fixed release

Versions by branch

Per branch: the newest release the vendor lists, what the vendor recommends and for whom, the support state and when Patcharo last verified each fact. Three facts read from the vendor's documents and shown apart: the newest release is not a recommendation.

The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

Filter the branches

18 branches shown

  1. 9.23Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportSupported · until 30 Sept 2028
    Vulnerabilities2 CVEs · 2 KEVnewest fix 9.23.1.47
  2. 9.19Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportSupported · until 30 Nov 2027
    Vulnerabilities7 CVEs · 7 KEV
  3. 9.18Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportSupported · until 30 Nov 2027
    Vulnerabilities7 CVEs · 7 KEVnewest fix 9.18.4.94
  4. 9.16Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportSupported · until 30 Nov 2027
    Vulnerabilities7 CVEs · 7 KEVnewest fix 9.16.4.103
  5. 9.17Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 Dec 2025
    Vulnerabilities6 CVEs · 6 KEV
  6. 9.15Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 30 Jun 2024
    Vulnerabilities5 CVEs · 5 KEVnewest fix 9.15.1.15
  7. 9.14Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 Mar 2025
    Vulnerabilities8 CVEs · 8 KEVnewest fix 9.14.2.8
  8. 9.13Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 30 Jun 2023
    Vulnerabilities3 CVEs · 3 KEVnewest fix 9.13.1.21
  9. 9.12Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 28 Feb 2026
    Vulnerabilities9 CVEs · 9 KEVnewest fix 9.12.4.13
  10. 9.10Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 Oct 2022
    Vulnerabilities3 CVEs · 3 KEVnewest fix 9.10.1.42
  11. 9.9Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 May 2023
    Vulnerabilities4 CVEs · 4 KEVnewest fix 9.9.2.85
  12. 9.8Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 28 Feb 2025
    Vulnerabilities10 CVEs · 10 KEVnewest fix 9.8.4.34
  13. 9.7Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 Aug 2022
    Vulnerabilities4 CVEs · 4 KEVnewest fix 9.7.1.24
  14. 9.6Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 30 Sept 2022
    Vulnerabilities4 CVEs · 4 KEVnewest fix 9.6.4.42
  15. 9.5Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 May 2021
    Vulnerabilities2 CVEs · 2 KEV
  16. 9.4Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 Aug 2021
    Vulnerabilities1 CVE · 1 KEVnewest fix 9.4.4.18
  17. 9.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 Aug 2022
    Vulnerabilities1 CVE · 1 KEVnewest fix 9.2.4.33
  18. 9.1Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.

    SupportEnd of life · until 31 Aug 2022
    Vulnerabilities1 CVE · 1 KEVnewest fix 9.1.7.29

Last successful check against the source. The content may be unchanged. Checked about every 6 hours (192 hours for a branch past its support); “page verified recently” means a successful check within the last 24 hours. Availability, recommendation and support are read from the vendor's documents and shown apart; a release Patcharo lists is not advice to install it.

Vulnerability history

Every CVE NVD attaches to Secure Firewall ASA over the period, whatever its score: published records only, rejected identifiers kept apart. Counts are publication counts.

Ten-year view

Last 12 months · 14 Nov 2025 – 14 Nov 2026 · Rolling calendar period, by publication date of the CVE record; both days included.

The history could not be read right now. The list below shows the analysed catalog only.

Verified history · History not collected yet: the counts above are not a measure.

Scores and statuses are the facts known today, not their history.

CVEs published over the period

14 Nov 2025 – 14 Nov 2026 · Newest first. A record analysed by Patcharo links to its page with affected and fixed releases; the others show NVD's facts.

The history could not be read right now. The list below shows the analysed catalog only.

Analysed vulnerabilities

  1. CVE-2026-20349Published:

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

    Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    High8.6CVSS 3.1, HighKEVDue 14 Aug 2026EPSS1%
  2. CVE-2025-20362Published:

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    High8.6CVSS 3.1, HighKEVDue 26 Sept 2025EPSS87%
  3. CVE-2025-20333Published:

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    Critical9.9CVSS 3.1, CriticalKEVDue 26 Sept 2025EPSS71%
  4. CVE-2024-20481Published:

    Cisco ASA and FTD Denial-of-Service Vulnerability

    Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    Medium5.8CVSS 3.1, MediumKEVDue 14 Nov 2024EPSS16%
  5. CVE-2024-20359Published:

    Cisco ASA and FTD Privilege Escalation Vulnerability

    Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    Medium6CVSS 3.1, MediumKEVDue 1 May 2024EPSS19%
  6. CVE-2024-20353Published:

    Cisco ASA and FTD Denial of Service Vulnerability

    Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    High8.6CVSS 3.1, HighKEVDue 1 May 2024EPSS71%
  7. CVE-2023-20269Published:

    Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

    Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    Critical9.1CVSS 3.1, CriticalKEVRansomwareDue 4 Oct 2023EPSS25%
  8. CVE-2020-3580Published:

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

    Cisco Secure Firewall ASA

    Medium6.1CVSS 3.1, MediumKEVRansomwareDue 3 May 2022EPSS86%
  9. CVE-2020-3452Published:

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    Cisco Secure Firewall ASA

    High7.5CVSS 3.1, HighKEVDue 3 May 2022EPSS100%
  10. CVE-2020-3259Published:

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

    Cisco Secure Firewall ASA

    High7.5CVSS 3.1, HighKEVRansomwareDue 7 Mar 2024EPSS72%
  11. CVE-2018-0296Published:

    Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

    Cisco Secure Firewall ASA, Cisco Adaptive Security Appliance unknown

    High7.5CVSS 3.1, HighKEVDue 3 May 2022EPSS100%

Vendor recommendation

The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.

Cisco publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.

CERT-FR

Advisories and alerts of the French national CERT referencing the CVEs of this product.

  • Advisory (AVI)CERTFR-2026-AVI-1010Vulnerability in Cisco productsPublished 12 Aug 2026
  • Alert (ALE)CERTFR-2025-ALE-013[Update] Multiple vulnerabilities in Cisco ASA and FTDPublished 25 Sept 2025 · updated 9 Dec 2025 · closed 9 Dec 2025
  • Advisory (AVI)CERTFR-2025-AVI-0819Multiple vulnerabilities in Cisco productsPublished 25 Sept 2025
  • Advisory (AVI)CERTFR-2024-AVI-0919Multiple vulnerabilities in Cisco productsPublished 24 Oct 2024

Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.

Official sources