CVE Watch—

CVE-2020-3580

Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

CVSS

—

Sin CVSS

EPSS

85.4%

p100

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

85.4%EPSS · 30 días85.4%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

Vulnerabilidad

Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

3 may 2022

Uso conocido en ransomware

Sí

Descripción resumida

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-3580

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2020-3452—

100.0%

KEV—80Cisco ASA and FTD Read-Only Path Traversal Vulnerability—CVE-2020-3259—

99.4%

KEV—80Cisco ASA and FTD Information Disclosure Vulnerability—CVE-2024-20353—

99.3%

KEV—80Cisco ASA and FTD Denial of Service Vulnerability—CVE-2024-20359—

97.1%

KEV—79Cisco ASA and FTD Privilege Escalation Vulnerability—CVE-2024-20481—

96.5%

KEV—79Cisco ASA and FTD Denial-of-Service Vulnerability—