# Adaptive Security Appliance Software vulnerabilities > Adaptive Security Appliance Software is made by Cisco. We track 324 published vulnerabilities in it, across 1,062 versions. 13 of them are on the list of flaws known to be exploited, the newest added on 25 September 2025. If you run Adaptive Security Appliance Software, check your version against the exploited flaws below and patch those first. Canonical page: https://www.precursorintelligence.com/product/cisco/adaptive_security_appliance_software ## At a glance - **Made by:** [Cisco](https://www.precursorintelligence.com/vendors/cisco) - **Published vulnerabilities:** 324 - **Known to be exploited:** 13 - **Versions tracked:** 1,062 - **Most recently added to the known-exploited list:** [CVE-2025-20333](https://www.precursorintelligence.com/what-is/cve-2025-20333), 25 September 2025. We keep watching the list. ## Which versions of Adaptive Security Appliance Software do the exploited flaws hit? Each exploited flaw lists the versions it affects, as published. "9.12 to before 9.12.4.72" means from 9.12 up to, but not including, 9.12.4.72. - [CVE-2025-20333](https://www.precursorintelligence.com/what-is/cve-2025-20333) (Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability): 9.12 to before 9.12.4.72, 9.14 to before 9.14.4.28, 9.16 to before 9.16.4.85, 9.17.0 to before 9.17.1.45, 9.18 to before 9.18.4.47, 9.19 to before 9.19.1.37, 9.20 to before 9.20.3.7, 9.22 to before 9.22.1.3 - [CVE-2025-20362](https://www.precursorintelligence.com/what-is/cve-2025-20362) (Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability): 9.12 to before 9.12.4.72, 9.14 to before 9.14.4.28, 9.16 to before 9.16.4.85, 9.17.0 to before 9.18.4.67, 9.19 to before 9.20.4.10, 9.22 to before 9.22.2.14, 9.23 to before 9.23.1.19 - [CVE-2024-20481](https://www.precursorintelligence.com/what-is/cve-2024-20481) (Cisco ASA and FTD Denial-of-Service Vulnerability): 9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.8, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.2.45, 9.8.3, 9.8.3.8, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3.26, 9.8.3.29, 9.8.4, 9.8.4.3, 9.8.4.7, 9.8.4.8, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.4.20, 9.8.4.22, 9.8.4.25, 9.8.4.26, 9.8.4.29, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.46, 9.8.4.48, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.3.12, 9.12.4, 9.12.4.2, 9.12.4.4, 9.12.4.7, 9.12.4.8, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.12.4.67, 9.14.1, 9.14.1.6, 9.14.1.10, 9.14.1.15, 9.14.1.19, 9.14.1.30, 9.14.2, 9.14.2.4, 9.14.2.8, 9.14.2.13, 9.14.2.15, 9.14.3, 9.14.3.1, 9.14.3.9, 9.14.3.11, 9.14.3.13, 9.14.3.15, 9.14.3.18, 9.14.4, 9.14.4.6, 9.14.4.7, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.14.4.24, 9.15.1, 9.15.1.1, 9.15.1.7, 9.15.1.10, 9.15.1.15, 9.15.1.16, 9.15.1.17, 9.15.1.21, 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.3, 9.16.2.7, 9.16.2.11, 9.16.2.13, 9.16.2.14, 9.16.3, 9.16.3.3, 9.16.3.14, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.16.4.48, 9.16.4.55, 9.16.4.57, 9.16.4.61, 9.17.1, 9.17.1.7, 9.17.1.9, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.17.1.33, 9.17.1.39, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.18.4.22, 9.18.4.24, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.19.1.28, 9.19.1.31, 9.20.1, 9.20.1.5, 9.20.2, 9.20.2.10, 9.20.2.21 - [CVE-2024-20353](https://www.precursorintelligence.com/what-is/cve-2024-20353) (Cisco ASA and FTD Denial of Service Vulnerability): 9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.8, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.3, 9.8.3.8, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3.26, 9.8.3.29, 9.8.4, 9.8.4.3, 9.8.4.7, 9.8.4.8, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.4.20, 9.8.4.22, 9.8.4.25, 9.8.4.26, 9.8.4.29, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.46, 9.8.4.48, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.3.12, 9.12.4, 9.12.4.2, 9.12.4.4, 9.12.4.7, 9.12.4.8, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.14.1, 9.14.1.6, 9.14.1.10, 9.14.1.15, 9.14.1.19, 9.14.1.30, 9.14.2, 9.14.2.4, 9.14.2.8, 9.14.2.13, 9.14.2.15, 9.14.3, 9.14.3.1, 9.14.3.9, 9.14.3.11, 9.14.3.13, 9.14.3.15, 9.14.3.18, 9.14.4, 9.14.4.6, 9.14.4.7, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.15.1, 9.15.1.1, 9.15.1.7, 9.15.1.10, 9.15.1.15, 9.15.1.16, 9.15.1.17, 9.15.1.21, 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.3, 9.16.2.7, 9.16.2.11, 9.16.2.13, 9.16.2.14, 9.16.3, 9.16.3.3, 9.16.3.14, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.16.4.48, 9.16.4.55, 9.17.1, 9.17.1.7, 9.17.1.9, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.17.1.33, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.20.1, 9.20.1.5, 9.20.2 - [CVE-2024-20359](https://www.precursorintelligence.com/what-is/cve-2024-20359) (Cisco ASA and FTD Privilege Escalation Vulnerability): 9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.8, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.3, 9.8.3.8, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3.26, 9.8.3.29, 9.8.4, 9.8.4.3, 9.8.4.7, 9.8.4.8, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.4.20, 9.8.4.22, 9.8.4.25, 9.8.4.26, 9.8.4.29, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.46, 9.8.4.48, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.3.12, 9.12.4, 9.12.4.2, 9.12.4.4, 9.12.4.7, 9.12.4.8, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.14.1, 9.14.1.6, 9.14.1.10, 9.14.1.15, 9.14.1.19, 9.14.1.30, 9.14.2, 9.14.2.4, 9.14.2.8, 9.14.2.13, 9.14.2.15, 9.14.3, 9.14.3.1, 9.14.3.9, 9.14.3.11, 9.14.3.13, 9.14.3.15, 9.14.3.18, 9.14.4, 9.14.4.6, 9.14.4.7, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.15.1, 9.15.1.1, 9.15.1.7, 9.15.1.10, 9.15.1.15, 9.15.1.16, 9.15.1.17, 9.15.1.21, 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.3, 9.16.2.7, 9.16.2.11, 9.16.2.13, 9.16.2.14, 9.16.3, 9.16.3.3, 9.16.3.14, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.16.4.48, 9.16.4.55, 9.17.1, 9.17.1.7, 9.17.1.9, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.17.1.33, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.18.4.8, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.19.1.24, 9.19.1.27, 9.20.1, 9.20.1.5, 9.20.2 - [CVE-2020-3259](https://www.precursorintelligence.com/what-is/cve-2020-3259) (Cisco ASA and FTD Information Disclosure Vulnerability): 9.8 to before 9.8.4.20, 9.9 to before 9.9.2.67, 9.10 to before 9.10.1.40, 9.12 to before 9.12.3.9, 9.13 to before 9.13.1.10 - [CVE-2023-20269](https://www.precursorintelligence.com/what-is/cve-2023-20269) (Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability): 9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.8, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.3, 9.8.3.8, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3.26, 9.8.3.29, 9.8.4, 9.8.4.3, 9.8.4.7, 9.8.4.8, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.4.20, 9.8.4.22, 9.8.4.25, 9.8.4.26, 9.8.4.29, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.46, 9.8.4.48, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.3.12, 9.12.4, 9.12.4.2, 9.12.4.4, 9.12.4.7, 9.12.4.8, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.14.1, 9.14.1.6, 9.14.1.10, 9.14.1.15, 9.14.1.19, 9.14.1.30, 9.14.2, 9.14.2.4, 9.14.2.8, 9.14.2.13, 9.14.2.15, 9.14.3, 9.14.3.1, 9.14.3.9, 9.14.3.11, 9.14.3.13, 9.14.3.15, 9.14.3.18, 9.14.4, 9.14.4.6, 9.14.4.7, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.15.1, 9.15.1.1, 9.15.1.7, 9.15.1.10, 9.15.1.15, 9.15.1.16, 9.15.1.17, 9.15.1.21, 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.3, 9.16.2.7, 9.16.2.11, 9.16.2.13, 9.16.2.14, 9.16.3, 9.16.3.3, 9.16.3.14, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.17.1, 9.17.1.7, 9.17.1.9, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.18.1, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18 - [CVE-2016-6366](https://www.precursorintelligence.com/what-is/cve-2016-6366) (Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability): 7.2.1 to before 9.0.4.40, 9.1.1 to before 9.1.7(9), 9.2.0 to before 9.2.4(14), 9.3.0 to before 9.3.3(10), 9.4.0.115 to before 9.4.3(8), 9.6.0 to before 9.6.1(11) - [CVE-2016-6367](https://www.precursorintelligence.com/what-is/cve-2016-6367) (Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability): 7.2.0 to before 8.4(3), 8.5 to before 9.0(1) - [CVE-2020-3452](https://www.precursorintelligence.com/what-is/cve-2020-3452) (Cisco ASA and FTD Read-Only Path Traversal Vulnerability): 9.6 to before 9.6.4.42, 9.8 to before 9.8.4.20, 9.9 to before 9.9.2.74, 9.10 to before 9.10.1.42, 9.12 to before 9.12.3.12, 9.13 to before 9.13.1.10, 9.14 to before 9.14.1.10 - [CVE-2018-0296](https://www.precursorintelligence.com/what-is/cve-2018-0296) (Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability): 8.1(2.5), 9.1 to before 9.1.7.29, 9.2 to before 9.2.4.33, 9.3 to before 9.4.4.18, 9.5 to before 9.6.4.8, 9.7 to before 9.7.1.24, 9.8 to before 9.8.2.28, 9.9 to before 9.9.2.1 - [CVE-2020-3580](https://www.precursorintelligence.com/what-is/cve-2020-3580) (Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability): before 9.8.4.34, 9.9 to before 9.9.2.85, 9.10 to before 9.12.4.13, 9.13 to before 9.13.1.21, 9.14 to before 9.14.2.8, 9.15 to before 9.15.1.15 1 more exploited flaw names Adaptive Security Appliance Software without a version of its own (for example as the system other affected software runs on). They are in the list below. ## Which Adaptive Security Appliance Software vulnerabilities are being exploited? 13 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2025-20333](https://www.precursorintelligence.com/what-is/cve-2025-20333): Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability. Critical, CVSS 9.9, chance of use in 30 days 71%, known exploited since 25 September 2025. - [CVE-2025-20362](https://www.precursorintelligence.com/what-is/cve-2025-20362): Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 87%, known exploited since 25 September 2025. - [CVE-2014-2120](https://www.precursorintelligence.com/what-is/cve-2014-2120): Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.1, chance of use in 30 days 23%, known exploited since 12 November 2024. - [CVE-2024-20481](https://www.precursorintelligence.com/what-is/cve-2024-20481): Cisco ASA and FTD Denial-of-Service Vulnerability. Medium, CVSS 5.8, chance of use in 30 days 16%, known exploited since 24 October 2024. - [CVE-2024-20353](https://www.precursorintelligence.com/what-is/cve-2024-20353): Cisco ASA and FTD Denial of Service Vulnerability. High, CVSS 8.6, chance of use in 30 days 71%, known exploited since 24 April 2024. - [CVE-2024-20359](https://www.precursorintelligence.com/what-is/cve-2024-20359): Cisco ASA and FTD Privilege Escalation Vulnerability. Medium, CVSS 6.0, chance of use in 30 days 19%, known exploited since 24 April 2024. - [CVE-2020-3259](https://www.precursorintelligence.com/what-is/cve-2020-3259): Cisco ASA and FTD Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days 72%, known exploited since 15 February 2024. - [CVE-2023-20269](https://www.precursorintelligence.com/what-is/cve-2023-20269): Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability. Medium, CVSS 5.0, chance of use in 30 days 25%, known exploited since 13 September 2023. - [CVE-2016-6366](https://www.precursorintelligence.com/what-is/cve-2016-6366): Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 88%, known exploited since 24 May 2022. - [CVE-2016-6367](https://www.precursorintelligence.com/what-is/cve-2016-6367): Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 23%, known exploited since 24 May 2022. - [CVE-2020-3452](https://www.precursorintelligence.com/what-is/cve-2020-3452): Cisco ASA and FTD Read-Only Path Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2018-0296](https://www.precursorintelligence.com/what-is/cve-2018-0296): Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2020-3580](https://www.precursorintelligence.com/what-is/cve-2020-3580): Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.1, chance of use in 30 days 86%, known exploited since 3 November 2021. ## Which Adaptive Security Appliance Software flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2020-3452](https://www.precursorintelligence.com/what-is/cve-2020-3452): >99%, High (CVSS 7.5), known exploited - [CVE-2018-0296](https://www.precursorintelligence.com/what-is/cve-2018-0296): >99%, High (CVSS 7.5), known exploited - [CVE-2020-3187](https://www.precursorintelligence.com/what-is/cve-2020-3187): 97%, Critical (CVSS 9.1) - [CVE-2016-6366](https://www.precursorintelligence.com/what-is/cve-2016-6366): 88%, High (CVSS 8.8), known exploited - [CVE-2025-20362](https://www.precursorintelligence.com/what-is/cve-2025-20362): 87%, Medium (CVSS 6.5), known exploited - [CVE-2018-0101](https://www.precursorintelligence.com/what-is/cve-2018-0101): 87%, Critical (CVSS 10.0) - [CVE-2020-3580](https://www.precursorintelligence.com/what-is/cve-2020-3580): 86%, Medium (CVSS 6.1), known exploited - [CVE-2020-3259](https://www.precursorintelligence.com/what-is/cve-2020-3259): 72%, High (CVSS 7.5), known exploited - [CVE-2025-20333](https://www.precursorintelligence.com/what-is/cve-2025-20333): 71%, Critical (CVSS 9.9), known exploited ## Questions ### How many vulnerabilities does Adaptive Security Appliance Software have? We track 324 published vulnerabilities listed under the name Adaptive Security Appliance Software, across 1,062 versions. The most recent Adaptive Security Appliance Software flaw added to the known-exploited list is CVE-2025-20333, on 25 September 2025. ### Which Adaptive Security Appliance Software vulnerabilities are being exploited? 13 are on the list of flaws known to be exploited. The most recently added are CVE-2025-20333, CVE-2025-20362 and CVE-2014-2120. ### Which versions of Adaptive Security Appliance Software do the exploited flaws affect? Each flaw names its own versions, usually as ranges. The newest, CVE-2025-20333, affects 9.12 to before 9.12.4.72, 9.14 to before 9.14.4.28, 9.16 to before 9.16.4.85, 9.17.0 to before 9.17.1.45 and more. The versions for every exploited flaw are listed on this page. ### How do I get alerts for Adaptive Security Appliance Software? Create a Precursor Intelligence account and track Adaptive Security Appliance Software. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook. ## Running Adaptive Security Appliance Software? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact