Cisco Firepower Threat Defense

productDE

cpe:/a:cisco:firepower:threat_defense

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical13high13medium0low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-20269US	critical9.1OT critical	26.6% (98th)	KEV	no fix	2023-09-06	—
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	—
CVE-2022-20759US	high8.8	28.7% (98th)	—	no fix	2022-05-03	—
CVE-2021-1236US	medium5.3	2.19% (82nd)	—	no fix	2021-01-13	—
CVE-2021-1224US	medium5.3	2.05% (81st)	—	no fix	2021-01-13	—
CVE-2021-1223US	high7.5	2.03% (81st)	—	no fix	2021-01-13	—
CVE-2022-20760US	high7.5	1.61% (76th)	—	no fix	2022-05-03	—
CVE-2022-20745US	high7.5	1.50% (74th)	—	no fix	2022-05-03	—
CVE-2022-20715US	high8.6	1.36% (71st)	—	no fix	2022-05-03	—
CVE-2023-20244US	high8.6	0.77% (55th)	—	no fix	2023-11-01	—
CVE-2023-20083US	high8.6	0.70% (53rd)	—	no fix	2023-11-01	—
CVE-2023-20042US	high8.6	0.68% (52nd)	—	no fix	2023-11-01	—
CVE-2023-20270US	medium5.8	0.67% (52nd)	—	no fix	2023-11-01	—
CVE-2023-20086US	high8.6	0.65% (51st)	—	no fix	2023-11-01	—
CVE-2023-20095US	high8.6	0.65% (51st)	—	no fix	2023-11-01	—
CVE-2023-20246US	medium5.3	0.56% (47th)	—	no fix	2023-11-01	—
CVE-2023-20256US	medium5.8	0.56% (47th)	—	no fix	2023-11-01	—
CVE-2023-20070US	medium4.0	0.54% (45th)	—	no fix	2023-11-01	—
CVE-2023-20177US	medium4.0	0.53% (44th)	—	no fix	2023-11-01	—
CVE-2023-20071US	medium5.8	0.52% (44th)	—	no fix	2023-11-01	—
CVE-2023-20245US	medium5.8	0.49% (42nd)	—	no fix	2023-11-01	—
CVE-2022-20742US	high7.4	0.46% (40th)	—	no fix	2022-05-03	—
CVE-2023-20063US	high8.2	0.43% (37th)	—	no fix	2023-11-01	—
CVE-2023-20267US	medium5.3	0.43% (37th)	—	no fix	2023-11-01	—
CVE-2023-20264US	medium6.1	0.38% (32nd)	—	no fix	2023-11-01	—
CVE-2023-20247US	medium4.3OT elevated	0.29% (22nd)	—	no fix	2023-11-01	—
CVE-2023-20031US	medium5.4	0.28% (21st)	—	no fix	2023-11-01	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control5 CVEs
CWE-404Improper Resource Shutdown or Release5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-244Improper Clearing of Heap Memory Before Release ('Heap Inspection')3 CVEs
CWE-266Incorrect Privilege Assignment3 CVEs
CWE-290Authentication Bypass by Spoofing3 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan