Cisco Firepower

productDE

cpe:/a:cisco:firepower:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical8high11medium0low

updated 2026-10-26

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2021-40438US	critical9.0OT critical	100.0% (100th)	KEV	no fix	2021-09-16	—
CVE-2024-20481US	medium5.8OT critical	15.9% (97th)	KEV	no fix	2024-10-23	—
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	—
CVE-2021-44832US	medium6.6	97.9% (100th)	Exploit	no fix	2021-12-28	—
CVE-2021-36160US	high7.5	62.9% (99th)	—	no fix	2021-09-16	—
CVE-2021-40114US	high7.5	2.47% (84th)	—	no fix	2021-10-27	—
CVE-2020-3299US	medium5.8	2.31% (83rd)	—	no fix	2020-10-21	—
CVE-2021-20325US	critical9.8	1.59% (76th)	—	no fix	2022-02-18	—
CVE-2021-40116US	high7.5	1.39% (72nd)	—	no fix	2021-10-27	—
CVE-2024-20351US	high7.5	0.73% (54th)	—	no fix	2024-10-23	—
CVE-2024-20331US	medium5.9OT elevated	0.68% (52nd)	—	no fix	2024-10-23	—
CVE-2024-20330US	high7.5	0.66% (51st)	—	no fix	2024-10-23	—
CVE-2024-20268US	—	0.64% (51st)	—	no fix	2024-10-23	—
CVE-2024-20260US	—	0.59% (48th)	—	no fix	2024-10-23	—
CVE-2023-20246US	medium5.3	0.56% (47th)	—	no fix	2023-11-01	—
CVE-2024-20493US	medium5.3	0.55% (46th)	—	no fix	2024-10-23	—
CVE-2024-20402US	high8.6	0.53% (44th)	—	no fix	2024-10-23	—
CVE-2023-20071US	medium5.8	0.52% (44th)	—	no fix	2023-11-01	—
CVE-2024-20426US	high8.6	0.52% (44th)	—	no fix	2024-10-23	—
CVE-2024-20495US	—	0.52% (44th)	—	no fix	2024-10-23	—
CVE-2024-20494US	—	0.52% (44th)	—	no fix	2024-10-23	—
CVE-2024-20342US	high8.6	0.49% (42nd)	—	no fix	2024-10-23	—
CVE-2024-20299US	—	0.48% (41st)	—	no fix	2024-10-23	—
CVE-2024-20297US	—	0.48% (41st)	—	no fix	2024-10-23	—
CVE-2024-20384US	—	0.45% (39th)	—	no fix	2024-10-23	—
CVE-2024-20408US	—	0.45% (39th)	—	no fix	2024-10-23	—
CVE-2024-20341US	medium6.1	0.43% (37th)	—	no fix	2024-10-23	—
CVE-2024-20382US	medium6.1	0.41% (35th)	—	no fix	2024-10-23	—
CVE-2024-20407US	—	0.40% (35th)	—	no fix	2024-10-23	—
CVE-2024-20363US	—	0.37% (30th)	—	no fix	2024-05-22	—
CVE-2024-20485US	medium6.7	0.19% (8th)	—	no fix	2024-10-23	—
CVE-2024-20370US	—	0.17% (6th)	—	no fix	2024-10-23	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-290Authentication Bypass by Spoofing5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-1287Improper Validation of Specified Type of Input2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-772Missing Release of Resource after Effective Lifetime2 CVEs
CWE-788Access of Memory Location After End of Buffer2 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan