Threat intelligence / Vulnerability
CVE-2020-3580
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information.
Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03
Confidence
—
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information.
Labels
CISA KEV context
Vendor / productCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Added2021-11-03
Due date2022-05-03
7 recorded
Relationships
2 external