Skip to content
Patcharo

Secure Firewall ASA

Cisco Secure Firewall ASA 9.12

Vulnerabilities, fixed releases, vendor recommendation and support status of the 9.12 branch, from official sources.

Sources last modified 12 Aug 2026 · Last verified by Patcharo: 1 Oct 2026 at 13:37 UTC

9
Matched CVEs

including 2 critical

9
CISA KEV
9.12.4.13
Newest fix stated
End of life · 28 Feb 2026
Support

In brief

Recommended maintenance build
No official recommendation
Recommended release
No official recommendation
Releases listed by the vendor
No release list read from the vendor
CERT-FR
3 documents

Vulnerabilities affecting 9.12

Each record matched to this branch with the fixed release the source states, newest first.

  1. CVE-2025-20362KEV

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    High8.6CVSS 3.1, High
    First fixed releaseNot published in the sources followed
    Published
  2. CVE-2025-20333KEV

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    Critical9.9CVSS 3.1, Critical
    First fixed releaseNot published in the sources followed
    Published
  3. CVE-2024-20481KEV

    Cisco ASA and FTD Denial-of-Service Vulnerability

    Medium5.8CVSS 3.1, Medium
    First fixed releaseNot published in the sources followed
    Published
  4. CVE-2024-20359KEV

    Cisco ASA and FTD Privilege Escalation Vulnerability

    Medium6CVSS 3.1, Medium
    First fixed releaseNot published in the sources followed
    Published
  5. CVE-2024-20353KEV

    Cisco ASA and FTD Denial of Service Vulnerability

    High8.6CVSS 3.1, High
    First fixed releaseNot published in the sources followed
    Published
  6. CVE-2023-20269KEVRansomware

    Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

    Critical9.1CVSS 3.1, Critical
    First fixed releaseNot published in the sources followed
    Published
  7. CVE-2020-3580KEVRansomware

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

    Medium6.1CVSS 3.1, Medium
    First fixed release9.12.4.13
    Published
  8. CVE-2020-3452KEV

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    High7.5CVSS 3.1, High
    First fixed release9.12.3.12
    Published
  9. CVE-2020-3259KEVRansomware

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

    High7.5CVSS 3.1, High
    First fixed release9.12.3.9
    Published

Vendor recommendation

The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.

Cisco publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.

Support status

From the vendor's published life-cycle policy; support is not a recommendation.

  1. 9.12
    SupportEnd of life
    End of support28 Feb 2026

End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance(ASA) 9.12(x) Adaptive Security Virtual Appliance(ASAv) 9.12(x) and Adaptive S · retrieved 1 Oct 2026 at 13:38 UTC

CERT-FR advisories and alerts

Documents of the French national CERT referencing these CVEs, newest first.

  • Alert (ALE)CERTFR-2025-ALE-013[Update] Multiple vulnerabilities in Cisco ASA and FTDPublished 25 Sept 2025 · updated 9 Dec 2025 · closed 9 Dec 2025
  • Advisory (AVI)CERTFR-2025-AVI-0819Multiple vulnerabilities in Cisco productsPublished 25 Sept 2025
  • Advisory (AVI)CERTFR-2024-AVI-0919Multiple vulnerabilities in Cisco productsPublished 24 Oct 2024

Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.

How Patcharo reads this

Affected and fixed releases come from the vendor's structured statements, matched by exact version and patch level. The recommendation is the vendor's own statement; the support status comes from its life-cycle policy. Unknown never becomes Not affected.

Read the methodologyRead the guide: Cisco Secure Firewall release trains: Threat Defense, Management Center and ASA versions explained

Other Secure Firewall ASA branches

All Secure Firewall ASA vulnerabilities and branches

Official sources