Cisco Firepower Threat Defense Software vulnerabilities

23 CVEs affecting Cisco Firepower Threat Defense Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20268, published 2025-08-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1494, published 2024-11-15. Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The…
CVE-2025-20133, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote…
CVE-2025-20217, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…
CVE-2025-20225, published 2025-08-14. Medium severity, CVSS 5.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat…
CVE-2025-20263, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2025-20222, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could…
CVE-2025-20136, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation (NAT) DNS inspection for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure…
CVE-2025-20239, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat…
CVE-2025-20243, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload…
CVE-2025-20244, published 2025-08-14. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow a remote…

Latest

CVE-2025-20268, published 2025-08-14. Medium severity, CVSS 5.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Geolocation-Based Remote Access (RA) VPN feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured…
CVE-2025-20254, published 2025-08-14. Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow…
CVE-2025-20253, published 2025-08-14. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device…
CVE-2025-20252, published 2025-08-14. Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow…
CVE-2025-20251, published 2025-08-14. High severity, CVSS 8.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2025-20238, published 2025-08-14. Medium severity, CVSS 6.0. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute…