Product of Cisco
Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
As of , 6 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) vulnerabilities are on CISA's list of exploited vulnerabilities, 2 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2024-20353.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2024-20353ASA and FTD Denial of Service | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Patch this weekEPSS 0.71 | 0.71 | ||
| 2 | CVE-2020-3259ASA and FTD Information Disclosure | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Patch this weekRansomware use; EPSS 0.72 | 0.72 | ||
| 3 | CVE-2020-3452ASA and FTD Read-Only Path Traversal | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Patch this weekEPSS 0.99 | 0.99 | ||
| 4 | CVE-2020-3580ASA and FTD Cross-Site Scripting (XSS) | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Patch this weekRansomware use; EPSS 0.86 | 0.86 | ||
| 5 | CVE-2024-20359ASA and FTD Privilege Escalation | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Patch soon | 0.19 | ||
| 6 | CVE-2024-20481ASA and FTD Denial-of-Service | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Patch soon | 0.16 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 2 |
| 2022 | none |
| 2023 | none |
| 2024 | 4 |
| 2025 | none |
| 2026 | none |