Cisco Adaptive Security Appliance ASA Software vulnerabilities

18 CVEs affecting Cisco Adaptive Security Appliance ASA Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20263, published 2025-08-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-20133, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote…
CVE-2025-20225, published 2025-08-14. Medium severity, CVSS 5.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat…
CVE-2025-20263, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2025-20136, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation (NAT) DNS inspection for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure…
CVE-2025-20239, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat…
CVE-2025-20243, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload…
CVE-2025-20244, published 2025-08-14. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow a remote…
CVE-2025-20253, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device…
CVE-2025-20251, published 2025-08-14. High severity, CVSS 8.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2025-20254, published 2025-08-14. Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow…

Latest

CVE-2025-20252, published 2025-08-14. Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow…
CVE-2025-20238, published 2025-08-14. Medium severity, CVSS 6.0. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute…
CVE-2025-20237, published 2025-08-14. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute…