Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*

part: h version: 7.1 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductAdaptive Security Appliance 5500 (0bb624ed-6fb4-5964-8776-28307deeffc7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4455 vulnerable 2026-06-08 04:51:48.567149 Details available
The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web sites via a crafted URL obfuscated with ROT13 and a certain encoding. NOTE: this issue was originally reported as a vulnerability related to lack of restrictions to URLs listed in the Cisco WebVPN bookmark component, but the vendor states that "The bookmark feature is not a security feature."
Published: 2009-12-29T23:00:00.000Z
Updated: 2024-08-07T07:01:20.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1160 vulnerable 2026-06-08 04:51:13.280475 Details available
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.
Published: 2009-04-09T15:00:00.000Z
Updated: 2024-08-07T05:04:48.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1158 vulnerable 2026-06-08 04:51:13.279486 Details available
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet.
Published: 2009-04-09T15:00:00.000Z
Updated: 2024-08-07T05:04:49.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1157 vulnerable 2026-06-08 04:51:13.277186 Details available
Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before 8.1(2)19 allows remote attackers to cause a denial of service (memory consumption or device reload) via a crafted TCP packet.
Published: 2009-04-09T15:00:00.000Z
Updated: 2024-08-07T05:04:49.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1155 vulnerable 2026-06-08 04:51:13.270701 Details available
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.
Published: 2009-04-09T15:00:00.000Z
Updated: 2024-08-07T05:04:49.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.