Cisco Adaptive Security Appliance (ASA) Software 9.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0:*:*:*:*:*:*:*

part: o version: 9.0 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductAdaptive Security Appliance Software (61cc8c6b-2374-51e9-a9d6-1bfc0aebc7b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3393 vulnerable 2026-06-08 05:05:32.488913 Details available
The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.14), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), and 9.2 before 9.2(2.4) does not properly implement authentication, which allows remote attackers to modify RAMFS customization objects via unspecified vectors, as demonstrated by inserting XSS sequences or capturing credentials, aka Bug ID CSCup36829.
Published: 2014-10-10T10:00:00.000Z
Updated: 2024-08-06T10:43:05.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3392 vulnerable 2026-06-08 05:05:32.470163 Details available
The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows remote attackers to obtain sensitive information from process memory or modify memory contents via crafted parameters, aka Bug ID CSCuq29136.
Published: 2014-10-10T10:00:00.000Z
Updated: 2024-08-06T10:43:05.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2129 vulnerable 2026-06-08 05:05:27.667764 Details available
The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted SIP packets, aka Bug ID CSCuh44052.
Published: 2014-04-10T01:00:00.000Z
Updated: 2024-08-06T10:05:59.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2128 vulnerable 2026-06-08 05:05:27.667308 Details available
The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40), 8.4 before 8.4(7.3), 8.6 before 8.6(1.13), 9.0 before 9.0(3.8), and 9.1 before 9.1(3.2) allows remote attackers to bypass authentication via (1) a crafted cookie value within modified HTTP POST data or (2) a crafted URL, aka Bug ID CSCua85555.
Published: 2014-04-10T01:00:00.000Z
Updated: 2024-08-06T10:06:00.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2127 vulnerable 2026-06-08 05:05:27.666843 Details available
Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3) does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows remote authenticated users to gain privileges by establishing a Clientless SSL VPN session and entering crafted URLs, aka Bug ID CSCul70099.
Published: 2014-04-10T01:00:00.000Z
Updated: 2024-08-06T10:05:59.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2126 vulnerable 2026-06-08 05:05:27.662257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6682 vulnerable 2026-06-08 05:04:57.803425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5568 vulnerable 2026-06-08 05:04:52.205557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5560 vulnerable 2026-06-08 05:04:52.156008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5542 vulnerable 2026-06-08 05:04:52.066745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5515 vulnerable 2026-06-08 05:04:52.023670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5513 vulnerable 2026-06-08 05:04:52.022306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5512 vulnerable 2026-06-08 05:04:52.021297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5511 vulnerable 2026-06-08 05:04:52.020195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5510 vulnerable 2026-06-08 05:04:52.008334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5509 vulnerable 2026-06-08 05:04:52.006091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5508 vulnerable 2026-06-08 05:04:51.988286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1152 vulnerable 2026-06-08 05:03:52.840545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1150 vulnerable 2026-06-08 05:03:52.837186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.