Vulnerabilities > Cisco > Firepower Threat Defense > 7.1.0.1

DATE CVE VULNERABILITY TITLE RISK
2022-08-10 CVE-2022-20713 Cross-site Scripting vulnerability in Cisco products
A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device.
network
low complexity
cisco CWE-79
6.1
2022-08-10 CVE-2022-20866 Information Exposure Through Discrepancy vulnerability in Cisco products
A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve an RSA private key.
network
low complexity
cisco CWE-203
7.5
2022-04-21 CVE-2022-20795 Insufficient Verification of Data Authenticity vulnerability in Cisco Adaptive Security Appliance
A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-345
7.5