Class familyCisco · Adaptive Security Appliance (ASA)
Cisco ASA cross-site scripting flaws, 2014–2026
11 Adaptive Security Appliance (ASA) CVEs with CWE-79 weaknesses, 19 Mar 2014 to 4 Mar 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2014’14
2015’15
2016’16
2017’17
2018’18
2 2019’19
5 2020’20
2021’21
2022’22
2023’23
2 2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
20141 CVE, 1 in KEV
20192 CVEs
20205 CVEs, 1 in KEV
20242 CVEs
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2014-2120KEV | 19 Mar 2014 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | Grouped by weakness | 61.8 |
| CVE-2019-1701 | 3 May 2019 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerabilities | Grouped by weakness | 15.1 |
| CVE-2019-12695 | 2 Oct 2019 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerability | Grouped by weakness | 17.2 |
| CVE-2020-3580KEV | 21 Oct 2020 | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | Grouped by weakness | 77.2 |
| CVE-2020-3581 | 21 Oct 2020 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site… | Grouped by weakness | 17.7 |
| CVE-2020-3582 | 21 Oct 2020 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site… | Grouped by weakness | 17.7 |
| CVE-2020-3583 | 21 Oct 2020 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site… | Grouped by weakness | 17.2 |
| CVE-2020-3599 | 21 Oct 2020 | Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting Vulnerability | Grouped by weakness | 15.8 |
| CVE-2024-20443 | 7 Aug 2024 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to… | Grouped by weakness | 8.1 |
| CVE-2021-1444 | 18 Nov 2024 | Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software Web Services… | Grouped by weakness | 12.2 |
| CVE-2026-20102 | 4 Mar 2026 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected… | Grouped by weakness | 9.0 |