6.1
Moyenne
CVE-2026-20102 A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure…
Description
A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the SAML feature and access sensitive, browser-based information. This vulnerability is due to insufficient input validation of multiple HTTP parameters. An attacker could exploit this vulnerability by persuading a user to access a malicious link. A successful exploit could allow the attacker to conduct a reflected XSS attack through an affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.23 | 9.23.1.13 → 9.23.1.19 | Pas de correctif indiqué |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.2.13 | Pas de correctif indiqué |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20 | 9.20.4.7 → 9.20.4.10 | Pas de correctif indiqué |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18 | 9.18.4.66 → 9.18.4.67 | Pas de correctif indiqué |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.17 | 9.17.1 → 9.17.1.46 | Pas de correctif indiqué |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16 | 9.16.1 → 9.16.2.14 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.1 | 7.1.0 → 7.1.0.3 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.0 | 7.0.0 → 7.0.1.1 | Pas de correctif indiqué |
Références
- cisco-sa-asaftd-saml-LktTrwZP sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
Les 48 CVE de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software →
CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
8.6
Élevée
CVE-2026-20121
A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall…
5.3
Moyenne
CVE-2026-20120
A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall…
5.8
Moyenne
CVE-2026-20248
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software…
6.8
Moyenne