UpHeron
All vulnerabilities

Servers and applications

CVE-2025-20363

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker (Cisco ASA and FTD Software) or authenticated, remote attacker (Cisco IOS, IOS XE, and IOS XR Software) with low user…

Severity
Critical 9.0
Published
25 Sept 2025
Last changed
18 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.16.4.84, 9.18.4.57, 9.19.1.42, 9.20.3.16, 9.22.2, 9.23.1.3
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • From 9.23 before 9.23.1.3
  • From 9.22 before 9.22.2
  • From 9.20.1 before 9.20.3.16
  • From 9.19.1 before 9.19.1.42
All 8 release lines
  • From 9.12 before 9.12.4.72
  • From 9.14 before 9.14.4.28
  • From 9.16 before 9.16.4.84
  • From 9.17.1 before 9.18.4.57
  • From 9.19.1 before 9.19.1.42
  • From 9.20.1 before 9.20.3.16
  • From 9.22 before 9.22.2
  • From 9.23 before 9.23.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-20363
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-20363