CVE Watch—

CVE-2020-3580

Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

CVSS

—

No CVSS

EPSS

85.4%

p100

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

85.4%EPSS · 30 days85.4%

2026-06-302026-07-16

KEV catalog record

Product

Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

Vulnerability

Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Yes

Summary description

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-3580

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2020-3452—

100.0%

KEV—80Cisco ASA and FTD Read-Only Path Traversal Vulnerability—CVE-2020-3259—

99.4%

KEV—80Cisco ASA and FTD Information Disclosure Vulnerability—CVE-2024-20353—

99.3%

KEV—80Cisco ASA and FTD Denial of Service Vulnerability—CVE-2024-20359—

97.1%

KEV—79Cisco ASA and FTD Privilege Escalation Vulnerability—CVE-2024-20481—

96.5%

KEV—79Cisco ASA and FTD Denial-of-Service Vulnerability—