CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 11:10 PM ET)

What this means for you

This week: 3,265 CVEs published, 234 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,265; Show in the list
Critical, last 7 days: 234; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product cisco:secure_firewall_threat_defense. Show all products

52 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2018-0296 Known exploited	High 7.5	A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a… Assigned by cisco	Jun 7, 2018
CVE-2020-3259 Known exploited	High 7.5	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability Assigned by cisco	May 6, 2020
CVE-2020-3452 Known exploited	High 7.5	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability Assigned by cisco	Jul 22, 2020
CVE-2020-3580 Known exploited	Medium 6.1	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities Assigned by cisco	Oct 21, 2020
CVE-2021-44228 Known exploited	Critical 10.0	Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints Assigned by apache	Dec 9, 2021
CVE-2023-20269 Known exploited	Medium 5.0	A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker… Assigned by cisco	Sep 6, 2023
CVE-2023-44487 Known exploited	High 7.5	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. Assigned by mitre	Oct 9, 2023
CVE-2024-20353 Known exploited	High 8.6	A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote att… Assigned by cisco	Apr 24, 2024
CVE-2024-20359 Known exploited	Medium 6.0	A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Assigned by cisco	Apr 24, 2024
CVE-2024-20481 Known exploited	Medium 5.8	A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote a… Assigned by cisco	Oct 23, 2024

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.