7.8
CVE-2015-0677
- EPSS 1.05%
- Veröffentlicht 13.04.2015 01:59:03
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle psirt@cisco.com
- Teams Watchlist Login
- Unerledigt Login
The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4), and 9.3 before 9.3(3), when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a denial of service (VPN outage or device reload) via a crafted XML document, aka Bug ID CSCus95290.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance Software Version8.4.1
Cisco ≫ Adaptive Security Appliance Software Version8.4.1.3
Cisco ≫ Adaptive Security Appliance Software Version8.4.1.11
Cisco ≫ Adaptive Security Appliance Software Version8.4.2
Cisco ≫ Adaptive Security Appliance Software Version8.4.2.1
Cisco ≫ Adaptive Security Appliance Software Version8.4.2.8
Cisco ≫ Adaptive Security Appliance Software Version8.4.3
Cisco ≫ Adaptive Security Appliance Software Version8.4.3.8
Cisco ≫ Adaptive Security Appliance Software Version8.4.3.9
Cisco ≫ Adaptive Security Appliance Software Version8.4.4
Cisco ≫ Adaptive Security Appliance Software Version8.4.4.1
Cisco ≫ Adaptive Security Appliance Software Version8.4.4.3
Cisco ≫ Adaptive Security Appliance Software Version8.4.4.5
Cisco ≫ Adaptive Security Appliance Software Version8.4.4.9
Cisco ≫ Adaptive Security Appliance Software Version8.4.5
Cisco ≫ Adaptive Security Appliance Software Version8.4.5.6
Cisco ≫ Adaptive Security Appliance Software Version8.4.6
Cisco ≫ Adaptive Security Appliance Software Version8.4.7
Cisco ≫ Adaptive Security Appliance Software Version8.4.7.3
Cisco ≫ Adaptive Security Appliance Software Version8.4.7.15
Cisco ≫ Adaptive Security Appliance Software Version8.4.7.22
Cisco ≫ Adaptive Security Appliance Software Version8.4.7.23
Cisco ≫ Adaptive Security Appliance Software Version8.4.7.26
Cisco ≫ Adaptive Security Appliance Software Version8.6.1
Cisco ≫ Adaptive Security Appliance Software Version8.6.1.1
Cisco ≫ Adaptive Security Appliance Software Version8.6.1.2
Cisco ≫ Adaptive Security Appliance Software Version8.6.1.5
Cisco ≫ Adaptive Security Appliance Software Version8.6.1.10
Cisco ≫ Adaptive Security Appliance Software Version8.6.1.12
Cisco ≫ Adaptive Security Appliance Software Version8.6.1.13
Cisco ≫ Adaptive Security Appliance Software Version8.6.1.14
Cisco ≫ Adaptive Security Appliance Software Version9.0.1
Cisco ≫ Adaptive Security Appliance Software Version9.0.2
Cisco ≫ Adaptive Security Appliance Software Version9.0.2.10
Cisco ≫ Adaptive Security Appliance Software Version9.0.3
Cisco ≫ Adaptive Security Appliance Software Version9.0.3.6
Cisco ≫ Adaptive Security Appliance Software Version9.0.3.8
Cisco ≫ Adaptive Security Appliance Software Version9.0.4
Cisco ≫ Adaptive Security Appliance Software Version9.0.4.1
Cisco ≫ Adaptive Security Appliance Software Version9.0.4.5
Cisco ≫ Adaptive Security Appliance Software Version9.0.4.7
Cisco ≫ Adaptive Security Appliance Software Version9.0.4.17
Cisco ≫ Adaptive Security Appliance Software Version9.0.4.20
Cisco ≫ Adaptive Security Appliance Software Version9.0.4.24
Cisco ≫ Adaptive Security Appliance Software Version9.0.4.26
Cisco ≫ Adaptive Security Appliance Software Version9.0.4.29
Cisco ≫ Adaptive Security Appliance Software Version9.1.1
Cisco ≫ Adaptive Security Appliance Software Version9.1.1.4
Cisco ≫ Adaptive Security Appliance Software Version9.1.2
Cisco ≫ Adaptive Security Appliance Software Version9.1.2.8
Cisco ≫ Adaptive Security Appliance Software Version9.1.3
Cisco ≫ Adaptive Security Appliance Software Version9.1.3.2
Cisco ≫ Adaptive Security Appliance Software Version9.1.4
Cisco ≫ Adaptive Security Appliance Software Version9.1.4.5
Cisco ≫ Adaptive Security Appliance Software Version9.1.5
Cisco ≫ Adaptive Security Appliance Software Version9.1.5.10
Cisco ≫ Adaptive Security Appliance Software Version9.1.5.12
Cisco ≫ Adaptive Security Appliance Software Version9.1.5.15
Cisco ≫ Adaptive Security Appliance Software Version9.1.5.21
Cisco ≫ Adaptive Security Appliance Software Version9.2.1
Cisco ≫ Adaptive Security Appliance Software Version9.2.2
Cisco ≫ Adaptive Security Appliance Software Version9.2.2.4
Cisco ≫ Adaptive Security Appliance Software Version9.2.2.7
Cisco ≫ Adaptive Security Appliance Software Version9.2.2.8
Cisco ≫ Adaptive Security Appliance Software Version9.2.3
Cisco ≫ Adaptive Security Appliance Software Version9.2.3.3
Cisco ≫ Adaptive Security Appliance Software Version9.3.1
Cisco ≫ Adaptive Security Appliance Software Version9.3.1.1
Cisco ≫ Adaptive Security Appliance Software Version9.3.2
Cisco ≫ Adaptive Security Appliance Software Version9.3.2.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.05% | 0.766 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.