Adaptive Security Appliance
Vendor:
First CVE: Nov 18, 2005 · Active for 20 years
363
Total CVEs
More Total CVEs than 99% of tracked products
16.5
Avg CVEs / Year
Higher CVE frequency than 88% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 39% of tracked products
3.6%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Adaptive Security Appliance over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 18, 2005
20 years ago
Most Recent CVE
Mar 4, 2026
146 days ago
CVE Severity & Scoring
Adaptive Security Appliance363 CVEs
44%
54%
All CVEs353,240 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local14 (3.9%)
Network174 (47.9%)
Unknown162 (44.6%)
Physical1 (0.3%)
Adjacent Network12 (3.3%)
Attack Complexity
Low186 (51.2%)
High15 (4.1%)
Unknown162 (44.6%)
User Interaction
None176 (48.5%)
Unknown162 (44.6%)
Required25 (6.9%)
Privileges Required
Low38 (10.5%)
High13 (3.6%)
None150 (41.3%)
Unknown162 (44.6%)
Top CVEs
Signals from CVEs in this product scope (363 CVEs).
363 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-3452HIGH A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, | Jul 22, 2020 | 7.5 | 98 | YES | YES |
CVE-2018-0296HIGH A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpected | Jun 7, 2018 | 7.5 | 98 | YES | YES |
CVE-2025-20362HIGH Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by | Sep 25, 2025 | 8.6 | 97 | YES | YES |
CVE-2016-6366HIGH Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Modul | Aug 18, 2016 | 8.8 | 97 | YES | YES |
CVE-2020-3580MEDIUM Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen | Oct 21, 2020 | 6.1 | 95 | YES | YES |
CVE-2024-20353HIGH A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen | Apr 24, 2024 | 8.6 | 92 | YES | NO |
CVE-2025-20333CRITICAL A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut | Sep 25, 2025 | 9.9 | 90 | YES | NO |
CVE-2020-3259HIGH A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, | May 6, 2020 | 7.5 | 90 | YES | NO |
CVE-2020-3187CRITICAL A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, | May 6, 2020 | 9.1 | 89 | NO | YES |
CVE-2018-0101CRITICAL A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause | Jan 29, 2018 | 10.0 | 86 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (363 CVEs).
CISA KEV
13 CVEs
3.6% of CVEs· Bottom 1%
Metasploit
3 CVEs
0.8% of CVEs· Bottom 1%
Nuclei
5 CVEs
1.4% of CVEs· Bottom 1%
ExploitDB
13 CVEs
3.6% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (363 CVEs).
Media Mentions
Signals from CVEs in this product scope (363 CVEs).
Top CNAs Publishing CVEs For Adaptive Security Appliance
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.9.2.9 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.85 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.83 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.80 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9\(28\) | 1 | 7.5 | 2.5% | 0 | 0 |
| 9.9.2.74 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.67 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.66 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.61 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.59 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.56 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.52 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.50 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.47 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.40 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.36 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.32 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.27 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.25 | 3 | 6.4 | 0.7% | 0 | 0 |
| 9.9.2.235 | 1 | 5.9 | 0.7% | 0 | 0 |