{"schema_version":"1","data":[{"id":3536,"advisory_id":"22cca27b-f37e-4ec8-beea-41634662eecd","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0296","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:34.289019+00:00","extraction_method":"structured","technologies":["adaptive-security-appliance-asa","core-kev"],"cve_ids":["CVE-2018-0296"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","summary":"Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-0296","products":[{"name":{"value":"Adaptive Security Appliance (ASA)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-0296","aliases":["CVE-2018-0296"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2018-0296","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0296","dueDate":"2022-05-03","product":"Adaptive Security Appliance (ASA)","dateAdded":"2021-11-03","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure.","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-0296","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2571,"advisory_id":"8754ac90-0876-4ebd-b093-67602972069f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6367","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:28.785722+00:00","extraction_method":"structured","technologies":["adaptive-security-appliance-asa","core-kev"],"cve_ids":["CVE-2016-6367"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","summary":"A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-6367","products":[{"name":{"value":"Adaptive Security Appliance (ASA)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-6367","aliases":["CVE-2016-6367"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-77"],"cveID":"CVE-2016-6367","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-6367","dueDate":"2022-06-14","product":"Adaptive Security Appliance (ASA)","dateAdded":"2022-05-24","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-6367","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2570,"advisory_id":"eb1fe31c-ed74-4993-966f-a2111747d2ba","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6366","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:28.202536+00:00","extraction_method":"structured","technologies":["adaptive-security-appliance-asa","core-kev"],"cve_ids":["CVE-2016-6366"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","summary":"A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-6366","products":[{"name":{"value":"Adaptive Security Appliance (ASA)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-6366","aliases":["CVE-2016-6366"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2016-6366","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-6366","dueDate":"2022-06-14","product":"Adaptive Security Appliance (ASA)","dateAdded":"2022-05-24","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-6366","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1047,"advisory_id":"64ee6b50-d61b-4077-bf3a-13bbb5bde078","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-2120","source_published_at":"2024-11-12T00:00:00+00:00","published_at":"2026-10-24T20:55:13.635725+00:00","extraction_method":"structured","technologies":["adaptive-security-appliance-asa","core-kev"],"cve_ids":["CVE-2014-2120"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","summary":"Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2014-2120","products":[{"name":{"value":"Adaptive Security Appliance (ASA)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-2120","aliases":["CVE-2014-2120"],"affected":[],"modified":"2024-11-12T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-79"],"cveID":"CVE-2014-2120","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120","dueDate":"2024-12-03","product":"Adaptive Security Appliance (ASA)","dateAdded":"2024-11-12","vendorProject":"Cisco","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-2120","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3536,"next_before":1047}