Cisco Cisco Adaptive Security Virtual Appliance (ASAv)

Name: Cisco Cisco Adaptive Security Virtual Appliance (ASAv)
Brand: Cisco

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical0high7medium0low

updated 2026-10-28

vulnerabilities (79)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20265US	—	15.8% (97th)	Exploit	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20133US	—	0.78% (56th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20217US	—	0.72% (54th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20225US	—	0.71% (54th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20224US	—	0.71% (54th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2024-20358US	medium6.7	0.70% (53rd)	—	no fix	2024-04-24	≤ vers:unknown/*
CVE-2025-20263US	—	0.68% (52nd)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20127US	—	0.67% (52nd)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20222US	—	0.64% (50th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20136US	—	0.64% (50th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20239US	—	0.62% (49th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20243US	—	0.61% (49th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20244US	—	0.54% (45th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20268US	—	0.48% (41st)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20253US	—	0.47% (40th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20251US	—	0.47% (40th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20148US	—	0.46% (39th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2024-20340US	medium6.5	0.45% (39th)	—	no fix	2024-10-23	≤ vers:unknown/*
CVE-2025-20218US	—	0.45% (39th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20018US	—	0.45% (39th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20052US	—	0.44% (38th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20031US	—	0.44% (38th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20254US	—	0.43% (37th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20252US	—	0.43% (37th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20082US	—	0.43% (37th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20134US	—	0.42% (36th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20073US	—	0.40% (35th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20009US	—	0.40% (35th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20050US	—	0.40% (34th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20006US	—	0.40% (34th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20306US	—	0.39% (33rd)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20219US	—	0.38% (32nd)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20039US	—	0.37% (31st)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20101US	—OT elevated	0.37% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20301US	—OT elevated	0.37% (30th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20103US	—	0.36% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20002US	—	0.36% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20086US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20084US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20012US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20114US	—	0.35% (29th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20016US	medium6.7	0.35% (28th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20001US	—	0.34% (28th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20106US	—	0.34% (27th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20105US	—	0.33% (26th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20015US	—	0.32% (25th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20013US	—	0.32% (25th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20302US	—OT elevated	0.31% (24th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20049US	—	0.30% (23rd)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20014US	—	0.30% (23rd)	—	no fix	2026-03-04	≤ vers:unknown/*

showing 50 of 79

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-401Missing Release of Memory after Effective Lifetime14 CVEs
CWE-250Execution with Unnecessary Privileges4 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-1287Improper Validation of Specified Type of Input2 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)79 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan