{"id":"CVE-2026-20102","published":"2026-03-04T17:52:05Z","modified":"2026-03-04T18:09:27Z","title":"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected…","vendor":"Cisco","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","tier":"tail","description":{"text":"A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the SAML feature and access sensitive, browser-based information.\r\n\r\nThis vulnerability is due to insufficient input validation of multiple HTTP parameters. An attacker could exploit this vulnerability by persuading a user to access a malicious link. A successful exploit could allow the attacker to conduct a reflected XSS attack through an affected device.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00307,"percentile":0.23558,"provenance":"source"},"cwes":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation"}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP","tags":[]}],"priority":{"score":9.0,"factors":[{"name":"EPSS percentile","points":4.71},{"name":"CVSS severity","points":4.27}]},"vendorSlug":"cisco","affectedVersions":[{"vendor":"Cisco","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","versions":["9.16.1","9.16.1.28","9.16.2","9.16.2.3","9.16.2.7","9.17.1","9.16.2.11","9.16.2.13","9.16.2.14","9.17.1.7"]},{"vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","versions":["7.0.0","7.0.0.1","7.0.1","7.1.0","7.0.1.1","7.1.0.1","7.1.0.2","7.1.0.3"]}],"euvd":{"id":"EUVD-2026-9472","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-cisco-asa-cwe-79"}}