cisco adaptive security appliance

Name: cisco adaptive security appliance
Brand: cisco

productUS

cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical21high12medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2009-1201US	medium4.3	8.83% (95th)	Exploit	no fix	2009-06-25	3 versions
CVE-2009-1203US	medium6.0	3.78% (90th)	Exploit	no fix	2009-06-25	3 versions
CVE-2019-15992US	high7.2	4.07% (91st)	—	9.6.4.36	2020-09-23	< 9.6.4.36
CVE-2020-3304US	high8.6	3.86% (90th)	—	9.6.4.45	2020-10-21	< 9.6.4.45
CVE-2020-3554US	high7.5	2.69% (86th)	—	9.12.4.3	2020-10-21	< 9.12.4.3
CVE-2019-12698US	high7.5	1.98% (81st)	—	9.6.4.31	2019-10-02	< 9.6.4.31
CVE-2009-1202US	medium4.3	1.98% (81st)	—	no fix	2009-06-25	3 versions
CVE-2020-3436US	high8.6	1.94% (80th)	—	9.6.4.45	2020-10-21	< 9.6.4.45
CVE-2020-3529US	high7.5	1.85% (79th)	—	9.6.4.45	2020-10-21	< 9.6.4.45
CVE-2019-12678US	high7.5	1.84% (79th)	—	9.4.4.37	2019-10-02	< 9.4.4.37
CVE-2020-3572US	high8.6	1.80% (78th)	—	9.6	2020-10-21	< 9.6
CVE-2019-12673US	high7.5	1.79% (78th)	—	9.6.4.34	2019-10-02	< 9.6.4.34
CVE-2021-40117US	high7.5	1.73% (77th)	—	9.8.4.40	2021-10-27	< 9.8.4.40
CVE-2020-3555US	high7.5	1.70% (77th)	—	9.6.4.43	2020-10-21	< 9.6.4.43
CVE-2019-12693US	medium4.9	1.49% (74th)	—	9.6.4.30	2019-10-02	< 9.6.4.30
CVE-2020-3528US	high7.5	1.45% (73rd)	—	9.6	2020-10-21	< 9.6
CVE-2021-40118US	high7.5	1.36% (72nd)	—	9.8.4.40	2021-10-27	< 9.8.4.40
CVE-2020-3564US	medium5.3	1.34% (71st)	—	9.6	2020-10-21	< 9.6
CVE-2021-1573US	high7.5	1.32% (71st)	—	no fix	2022-01-11	≤ 9.7
CVE-2020-3561US	medium4.7	1.27% (70th)	—	9.6.4.35	2020-10-21	< 9.6.4.35
CVE-2020-3306US	high7.5	1.24% (69th)	—	9.6.4.34	2020-05-06	< 9.6.4.34
CVE-2020-3305US	high7.5	1.24% (69th)	—	9.6.4.36	2020-05-06	< 9.6.4.36
CVE-2020-3303US	high7.5	1.24% (69th)	—	9.6.4.36	2020-05-06	< 9.6.4.36
CVE-2017-12265US	medium6.1	1.22% (69th)	—	no fix	2017-10-05	—
CVE-2021-34791US	medium5.3	1.15% (67th)	—	9.8.4.40	2021-10-27	< 9.8.4.40
CVE-2021-34790US	medium5.3	1.15% (67th)	—	9.8.4.40	2021-10-27	< 9.8.4.40
CVE-2019-12695US	medium6.1	1.07% (65th)	—	9.6.4.31	2019-10-02	< 9.6.4.31
CVE-2021-34787US	medium5.3	1.04% (64th)	—	9.8.4.40	2021-10-27	< 9.8.4.40
CVE-2020-3599US	medium6.1	0.83% (58th)	—	9.6.4.45	2020-10-21	< 9.6.4.45
CVE-2023-20107US	high7.5	0.72% (54th)	—	9.12.1	2023-03-23	< 9.12.1
CVE-2022-20795US	high7.5OT elevated	0.70% (53rd)	—	no fix	2022-04-21	≤ 9.16.3
CVE-2021-34793US	high8.6	0.59% (48th)	—	9.8.4.40	2021-10-27	< 9.8.4.40
CVE-2019-12676US	high7.4	0.51% (44th)	—	9.6.4.34	2019-10-02	< 9.6.4.34

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption10 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-358Improperly Implemented Security Check for Standard2 CVEs
CWE-183Permissive List of Allowed Inputs1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan