CVE-2026-20070 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability

Back Back to CVE browser

MEDIUM

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability

Published Mar 4, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.26%

Description

A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a browser that is accessing an affected device.  This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by persuading a user to follow a link to a malicious website that is designed to submit malicious input to the affected application. A successful exploit could allow the attacker to execute arbitrary HTML or script code in the browser in the context of the VPN web server.

Affected products

Vendor Cisco Product Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Default
n/a
- Version
  9.12.1
  Status
  affected
  Constraints
  -
- Version
  9.12.1.2
  Status
  affected
  Constraints
  -
- Version
  9.12.1.3
  Status
  affected
  Constraints
  -
- Version
  9.12.2
  Status
  affected
  Constraints
  -
- Version
  9.12.2.1
  Status
  affected
  Constraints
  -
- Version
  9.12.2.4
  Status
  affected
  Constraints
  -
- Version
  9.12.2.5
  Status
  affected
  Constraints
  -
- Version
  9.12.2.9
  Status
  affected
  Constraints
  -
- Version
  9.12.3
  Status
  affected
  Constraints
  -
- Version
  9.12.3.12
  Status
  affected
  Constraints
  -
- Version
  9.12.3.2
  Status
  affected
  Constraints
  -
- Version
  9.12.3.7
  Status
  affected
  Constraints
  -
- Version
  9.12.3.9
  Status
  affected
  Constraints
  -
- Version
  9.12.4
  Status
  affected
  Constraints
  -
- Version
  9.12.4.10
  Status
  affected
  Constraints
  -
- Version
  9.12.4.13
  Status
  affected
  Constraints
  -
- Version
  9.12.4.18
  Status
  affected
  Constraints
  -
- Version
  9.12.4.2
  Status
  affected
  Constraints
  -
- Version
  9.12.4.24
  Status
  affected
  Constraints
  -
- Version
  9.12.4.26
  Status
  affected
  Constraints
  -
- Version
  9.12.4.29
  Status
  affected
  Constraints
  -
- Version
  9.12.4.30
  Status
  affected
  Constraints
  -
- Version
  9.12.4.35
  Status
  affected
  Constraints
  -
- Version
  9.12.4.37
  Status
  affected
  Constraints
  -
- Version
  9.12.4.38
  Status
  affected
  Constraints
  -
- Version
  9.12.4.39
  Status
  affected
  Constraints
  -
- Version
  9.12.4.4
  Status
  affected
  Constraints
  -
- Version
  9.12.4.40
  Status
  affected
  Constraints
  -
- Version
  9.12.4.41
  Status
  affected
  Constraints
  -
- Version
  9.12.4.47
  Status
  affected
  Constraints
  -
- Version
  9.12.4.48
  Status
  affected
  Constraints
  -
- Version
  9.12.4.50
  Status
  affected
  Constraints
  -
- Version
  9.12.4.52
  Status
  affected
  Constraints
  -
- Version
  9.12.4.54
  Status
  affected
  Constraints
  -
- Version
  9.12.4.55
  Status
  affected
  Constraints
  -
- Version
  9.12.4.56
  Status
  affected
  Constraints
  -
- Version
  9.12.4.58
  Status
  affected
  Constraints
  -
- Version
  9.12.4.62
  Status
  affected
  Constraints
  -
- Version
  9.12.4.65
  Status
  affected
  Constraints
  -
- Version
  9.12.4.67
  Status
  affected
  Constraints
  -
- Version
  9.12.4.7
  Status
  affected
  Constraints
  -
- Version
  9.12.4.8
  Status
  affected
  Constraints
  -
- Version
  9.16.1
  Status
  affected
  Constraints
  -
- Version
  9.16.1.28
  Status
  affected
  Constraints
  -
- Version
  9.16.2
  Status
  affected
  Constraints
  -
- Version
  9.16.2.11
  Status
  affected
  Constraints
  -
- Version
  9.16.2.13
  Status
  affected
  Constraints
  -
- Version
  9.16.2.14
  Status
  affected
  Constraints
  -
- Version
  9.16.2.3
  Status
  affected
  Constraints
  -
- Version
  9.16.2.7
  Status
  affected
  Constraints
  -
- Version
  9.16.3
  Status
  affected
  Constraints
  -
- Version
  9.16.3.14
  Status
  affected
  Constraints
  -
- Version
  9.16.3.15
  Status
  affected
  Constraints
  -
- Version
  9.16.3.19
  Status
  affected
  Constraints
  -
- Version
  9.16.3.23
  Status
  affected
  Constraints
  -
- Version
  9.16.3.3
  Status
  affected
  Constraints
  -
- Version
  9.16.4
  Status
  affected
  Constraints
  -
- Version
  9.16.4.14
  Status
  affected
  Constraints
  -
- Version
  9.16.4.19
  Status
  affected
  Constraints
  -
- Version
  9.16.4.27
  Status
  affected
  Constraints
  -
- Version
  9.16.4.38
  Status
  affected
  Constraints
  -
- Version
  9.16.4.39
  Status
  affected
  Constraints
  -
- Version
  9.16.4.42
  Status
  affected
  Constraints
  -
- Version
  9.16.4.48
  Status
  affected
  Constraints
  -
- Version
  9.16.4.55
  Status
  affected
  Constraints
  -
- Version
  9.16.4.57
  Status
  affected
  Constraints
  -
- Version
  9.16.4.61
  Status
  affected
  Constraints
  -
- Version
  9.16.4.62
  Status
  affected
  Constraints
  -
- Version
  9.16.4.67
  Status
  affected
  Constraints
  -
- Version
  9.16.4.70
  Status
  affected
  Constraints
  -
- Version
  9.16.4.71
  Status
  affected
  Constraints
  -
- Version
  9.16.4.76
  Status
  affected
  Constraints
  -
- Version
  9.16.4.82
  Status
  affected
  Constraints
  -
- Version
  9.16.4.84
  Status
  affected
  Constraints
  -
- Version
  9.16.4.85
  Status
  affected
  Constraints
  -
- Version
  9.16.4.9
  Status
  affected
  Constraints
  -
- Version
  9.17.1
  Status
  affected
  Constraints
  -
- Version
  9.17.1.10
  Status
  affected
  Constraints
  -
- Version
  9.17.1.11
  Status
  affected
  Constraints
  -
- Version
  9.17.1.13
  Status
  affected
  Constraints
  -
- Version
  9.17.1.15
  Status
  affected
  Constraints
  -
- Version
  9.17.1.20
  Status
  affected
  Constraints
  -
- Version
  9.17.1.30
  Status
  affected
  Constraints
  -
- Version
  9.17.1.33
  Status
  affected
  Constraints
  -
- Version
  9.17.1.39
  Status
  affected
  Constraints
  -
- Version
  9.17.1.45
  Status
  affected
  Constraints
  -
- Version
  9.17.1.46
  Status
  affected
  Constraints
  -
- Version
  9.17.1.7
  Status
  affected
  Constraints
  -
- Version
  9.17.1.9
  Status
  affected
  Constraints
  -
- Version
  9.18.1
  Status
  affected
  Constraints
  -
- Version
  9.18.1.3
  Status
  affected
  Constraints
  -
- Version
  9.18.2
  Status
  affected
  Constraints
  -
- Version
  9.18.2.5
  Status
  affected
  Constraints
  -
- Version
  9.18.2.7
  Status
  affected
  Constraints
  -
- Version
  9.18.2.8
  Status
  affected
  Constraints
  -
- Version
  9.18.3
  Status
  affected
  Constraints
  -
- Version
  9.18.3.39
  Status
  affected
  Constraints
  -
- Version
  9.18.3.46
  Status
  affected
  Constraints
  -
- Version
  9.18.3.53
  Status
  affected
  Constraints
  -
- Version
  9.18.3.55
  Status
  affected
  Constraints
  -
- Version
  9.18.3.56
  Status
  affected
  Constraints
  -
- Version
  9.18.4
  Status
  affected
  Constraints
  -
- Version
  9.18.4.22
  Status
  affected
  Constraints
  -
- Version
  9.18.4.24
  Status
  affected
  Constraints
  -
- Version
  9.18.4.29
  Status
  affected
  Constraints
  -
- Version
  9.18.4.34
  Status
  affected
  Constraints
  -
- Version
  9.18.4.40
  Status
  affected
  Constraints
  -
- Version
  9.18.4.47
  Status
  affected
  Constraints
  -
- Version
  9.18.4.5
  Status
  affected
  Constraints
  -
- Version
  9.18.4.50
  Status
  affected
  Constraints
  -
- Version
  9.18.4.52
  Status
  affected
  Constraints
  -
- Version
  9.18.4.53
  Status
  affected
  Constraints
  -
- Version
  9.18.4.57
  Status
  affected
  Constraints
  -
- Version
  9.18.4.66
  Status
  affected
  Constraints
  -
- Version
  9.18.4.67
  Status
  affected
  Constraints
  -
- Version
  9.18.4.68
  Status
  affected
  Constraints
  -
- Version
  9.18.4.8
  Status
  affected
  Constraints
  -
- Version
  9.19.1
  Status
  affected
  Constraints
  -
- Version
  9.19.1.12
  Status
  affected
  Constraints
  -
- Version
  9.19.1.18
  Status
  affected
  Constraints
  -
- Version
  9.19.1.22
  Status
  affected
  Constraints
  -
- Version
  9.19.1.24
  Status
  affected
  Constraints
  -
- Version
  9.19.1.27
  Status
  affected
  Constraints
  -
- Version
  9.19.1.28
  Status
  affected
  Constraints
  -
- Version
  9.19.1.31
  Status
  affected
  Constraints
  -
- Version
  9.19.1.37
  Status
  affected
  Constraints
  -
- Version
  9.19.1.38
  Status
  affected
  Constraints
  -
- Version
  9.19.1.42
  Status
  affected
  Constraints
  -
- Version
  9.19.1.5
  Status
  affected
  Constraints
  -
- Version
  9.19.1.9
  Status
  affected
  Constraints
  -
- Version
  9.20.1
  Status
  affected
  Constraints
  -
- Version
  9.20.1.5
  Status
  affected
  Constraints
  -
- Version
  9.20.2
  Status
  affected
  Constraints
  -
- Version
  9.20.2.10
  Status
  affected
  Constraints
  -
- Version
  9.20.2.21
  Status
  affected
  Constraints
  -
- Version
  9.20.2.22
  Status
  affected
  Constraints
  -
- Version
  9.20.3
  Status
  affected
  Constraints
  -
- Version
  9.20.3.10
  Status
  affected
  Constraints
  -
- Version
  9.20.3.13
  Status
  affected
  Constraints
  -
- Version
  9.20.3.16
  Status
  affected
  Constraints
  -
- Version
  9.20.3.20
  Status
  affected
  Constraints
  -
- Version
  9.20.3.4
  Status
  affected
  Constraints
  -
- Version
  9.20.3.7
  Status
  affected
  Constraints
  -
- Version
  9.20.3.9
  Status
  affected
  Constraints
  -
- Version
  9.20.4
  Status
  affected
  Constraints
  -
- Version
  9.20.4.10
  Status
  affected
  Constraints
  -
- Version
  9.20.4.7
  Status
  affected
  Constraints
  -
- Version
  9.22.1.1
  Status
  affected
  Constraints
  -
- Version
  9.22.1.2
  Status
  affected
  Constraints
  -
- Version
  9.22.1.3
  Status
  affected
  Constraints
  -
- Version
  9.22.1.6
  Status
  affected
  Constraints
  -
- Version
  9.22.2
  Status
  affected
  Constraints
  -
- Version
  9.22.2.13
  Status
  affected
  Constraints
  -
- Version
  9.22.2.14
  Status
  affected
  Constraints
  -
- Version
  9.22.2.4
  Status
  affected
  Constraints
  -
- Version
  9.22.2.9
  Status
  affected
  Constraints
  -
- Version
  9.23.1
  Status
  affected
  Constraints
  -
- Version
  9.23.1.13
  Status
  affected
  Constraints
  -
- Version
  9.23.1.19
  Status
  affected
  Constraints
  -
- Version
  9.23.1.3
  Status
  affected
  Constraints
  -
- Version
  9.23.1.7
  Status
  affected
  Constraints
  -
Vendor Cisco Product Cisco Secure Firewall Threat Defense (FTD) Software Default
n/a
- Version
  6.4.0
  Status
  affected
  Constraints
  -
- Version
  6.4.0.1
  Status
  affected
  Constraints
  -
- Version
  6.4.0.10
  Status
  affected
  Constraints
  -
- Version
  6.4.0.11
  Status
  affected
  Constraints
  -
- Version
  6.4.0.12
  Status
  affected
  Constraints
  -
- Version
  6.4.0.13
  Status
  affected
  Constraints
  -
- Version
  6.4.0.14
  Status
  affected
  Constraints
  -
- Version
  6.4.0.15
  Status
  affected
  Constraints
  -
- Version
  6.4.0.16
  Status
  affected
  Constraints
  -
- Version
  6.4.0.17
  Status
  affected
  Constraints
  -
- Version
  6.4.0.18
  Status
  affected
  Constraints
  -
- Version
  6.4.0.2
  Status
  affected
  Constraints
  -
- Version
  6.4.0.3
  Status
  affected
  Constraints
  -
- Version
  6.4.0.4
  Status
  affected
  Constraints
  -
- Version
  6.4.0.5
  Status
  affected
  Constraints
  -
- Version
  6.4.0.6
  Status
  affected
  Constraints
  -
- Version
  6.4.0.7
  Status
  affected
  Constraints
  -
- Version
  6.4.0.8
  Status
  affected
  Constraints
  -
- Version
  6.4.0.9
  Status
  affected
  Constraints
  -
- Version
  7.0.0
  Status
  affected
  Constraints
  -
- Version
  7.0.0.1
  Status
  affected
  Constraints
  -
- Version
  7.0.1
  Status
  affected
  Constraints
  -
- Version
  7.0.1.1
  Status
  affected
  Constraints
  -
- Version
  7.0.2
  Status
  affected
  Constraints
  -
- Version
  7.0.2.1
  Status
  affected
  Constraints
  -
- Version
  7.0.3
  Status
  affected
  Constraints
  -
- Version
  7.0.4
  Status
  affected
  Constraints
  -
- Version
  7.0.5
  Status
  affected
  Constraints
  -
- Version
  7.0.6
  Status
  affected
  Constraints
  -
- Version
  7.0.6.1
  Status
  affected
  Constraints
  -
- Version
  7.0.6.2
  Status
  affected
  Constraints
  -
- Version
  7.0.6.3
  Status
  affected
  Constraints
  -
- Version
  7.0.7
  Status
  affected
  Constraints
  -
- Version
  7.0.8
  Status
  affected
  Constraints
  -
- Version
  7.0.8.1
  Status
  affected
  Constraints
  -
- Version
  7.1.0
  Status
  affected
  Constraints
  -
- Version
  7.1.0.1
  Status
  affected
  Constraints
  -
- Version
  7.1.0.2
  Status
  affected
  Constraints
  -
- Version
  7.1.0.3
  Status
  affected
  Constraints
  -
- Version
  7.2.0
  Status
  affected
  Constraints
  -
- Version
  7.2.0.1
  Status
  affected
  Constraints
  -
- Version
  7.2.1
  Status
  affected
  Constraints
  -
- Version
  7.2.10
  Status
  affected
  Constraints
  -
- Version
  7.2.10.2
  Status
  affected
  Constraints
  -
- Version
  7.2.2
  Status
  affected
  Constraints
  -
- Version
  7.2.3
  Status
  affected
  Constraints
  -
- Version
  7.2.4
  Status
  affected
  Constraints
  -
- Version
  7.2.4.1
  Status
  affected
  Constraints
  -
- Version
  7.2.5
  Status
  affected
  Constraints
  -
- Version
  7.2.5.1
  Status
  affected
  Constraints
  -
- Version
  7.2.5.2
  Status
  affected
  Constraints
  -
- Version
  7.2.6
  Status
  affected
  Constraints
  -
- Version
  7.2.7
  Status
  affected
  Constraints
  -
- Version
  7.2.8
  Status
  affected
  Constraints
  -
- Version
  7.2.8.1
  Status
  affected
  Constraints
  -
- Version
  7.2.9
  Status
  affected
  Constraints
  -
- Version
  7.3.0
  Status
  affected
  Constraints
  -
- Version
  7.3.1
  Status
  affected
  Constraints
  -
- Version
  7.3.1.1
  Status
  affected
  Constraints
  -
- Version
  7.3.1.2
  Status
  affected
  Constraints
  -
- Version
  7.4.0
  Status
  affected
  Constraints
  -
- Version
  7.4.1
  Status
  affected
  Constraints
  -
- Version
  7.4.1.1
  Status
  affected
  Constraints
  -
- Version
  7.4.2
  Status
  affected
  Constraints
  -
- Version
  7.4.2.1
  Status
  affected
  Constraints
  -
- Version
  7.4.2.2
  Status
  affected
  Constraints
  -
- Version
  7.4.2.3
  Status
  affected
  Constraints
  -
- Version
  7.4.2.4
  Status
  affected
  Constraints
  -
- Version
  7.6.0
  Status
  affected
  Constraints
  -
- Version
  7.6.1
  Status
  affected
  Constraints
  -
- Version
  7.6.2
  Status
  affected
  Constraints
  -
- Version
  7.6.2.1
  Status
  affected
  Constraints
  -
- Version
  7.7.0
  Status
  affected
  Constraints
  -
- Version
  7.7.10
  Status
  affected
  Constraints
  -
- Version
  7.7.10.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

n/a

Version	Status	Constraints
9.12.1	affected	-
9.12.1.2	affected	-
9.12.1.3	affected	-
9.12.2	affected	-
9.12.2.1	affected	-
9.12.2.4	affected	-
9.12.2.5	affected	-
9.12.2.9	affected	-
9.12.3	affected	-
9.12.3.12	affected	-
9.12.3.2	affected	-
9.12.3.7	affected	-
9.12.3.9	affected	-
9.12.4	affected	-
9.12.4.10	affected	-
9.12.4.13	affected	-
9.12.4.18	affected	-
9.12.4.2	affected	-
9.12.4.24	affected	-
9.12.4.26	affected	-
9.12.4.29	affected	-
9.12.4.30	affected	-
9.12.4.35	affected	-
9.12.4.37	affected	-
9.12.4.38	affected	-
9.12.4.39	affected	-
9.12.4.4	affected	-
9.12.4.40	affected	-
9.12.4.41	affected	-
9.12.4.47	affected	-
9.12.4.48	affected	-
9.12.4.50	affected	-
9.12.4.52	affected	-
9.12.4.54	affected	-
9.12.4.55	affected	-
9.12.4.56	affected	-
9.12.4.58	affected	-
9.12.4.62	affected	-
9.12.4.65	affected	-
9.12.4.67	affected	-
9.12.4.7	affected	-
9.12.4.8	affected	-
9.16.1	affected	-
9.16.1.28	affected	-
9.16.2	affected	-
9.16.2.11	affected	-
9.16.2.13	affected	-
9.16.2.14	affected	-
9.16.2.3	affected	-
9.16.2.7	affected	-
9.16.3	affected	-
9.16.3.14	affected	-
9.16.3.15	affected	-
9.16.3.19	affected	-
9.16.3.23	affected	-
9.16.3.3	affected	-
9.16.4	affected	-
9.16.4.14	affected	-
9.16.4.19	affected	-
9.16.4.27	affected	-
9.16.4.38	affected	-
9.16.4.39	affected	-
9.16.4.42	affected	-
9.16.4.48	affected	-
9.16.4.55	affected	-
9.16.4.57	affected	-
9.16.4.61	affected	-
9.16.4.62	affected	-
9.16.4.67	affected	-
9.16.4.70	affected	-
9.16.4.71	affected	-
9.16.4.76	affected	-
9.16.4.82	affected	-
9.16.4.84	affected	-
9.16.4.85	affected	-
9.16.4.9	affected	-
9.17.1	affected	-
9.17.1.10	affected	-
9.17.1.11	affected	-
9.17.1.13	affected	-
9.17.1.15	affected	-
9.17.1.20	affected	-
9.17.1.30	affected	-
9.17.1.33	affected	-
9.17.1.39	affected	-
9.17.1.45	affected	-
9.17.1.46	affected	-
9.17.1.7	affected	-
9.17.1.9	affected	-
9.18.1	affected	-
9.18.1.3	affected	-
9.18.2	affected	-
9.18.2.5	affected	-
9.18.2.7	affected	-
9.18.2.8	affected	-
9.18.3	affected	-
9.18.3.39	affected	-
9.18.3.46	affected	-
9.18.3.53	affected	-
9.18.3.55	affected	-
9.18.3.56	affected	-
9.18.4	affected	-
9.18.4.22	affected	-
9.18.4.24	affected	-
9.18.4.29	affected	-
9.18.4.34	affected	-
9.18.4.40	affected	-
9.18.4.47	affected	-
9.18.4.5	affected	-
9.18.4.50	affected	-
9.18.4.52	affected	-
9.18.4.53	affected	-
9.18.4.57	affected	-
9.18.4.66	affected	-
9.18.4.67	affected	-
9.18.4.68	affected	-
9.18.4.8	affected	-
9.19.1	affected	-
9.19.1.12	affected	-
9.19.1.18	affected	-
9.19.1.22	affected	-
9.19.1.24	affected	-
9.19.1.27	affected	-
9.19.1.28	affected	-
9.19.1.31	affected	-
9.19.1.37	affected	-
9.19.1.38	affected	-
9.19.1.42	affected	-
9.19.1.5	affected	-
9.19.1.9	affected	-
9.20.1	affected	-
9.20.1.5	affected	-
9.20.2	affected	-
9.20.2.10	affected	-
9.20.2.21	affected	-
9.20.2.22	affected	-
9.20.3	affected	-
9.20.3.10	affected	-
9.20.3.13	affected	-
9.20.3.16	affected	-
9.20.3.20	affected	-
9.20.3.4	affected	-
9.20.3.7	affected	-
9.20.3.9	affected	-
9.20.4	affected	-
9.20.4.10	affected	-
9.20.4.7	affected	-
9.22.1.1	affected	-
9.22.1.2	affected	-
9.22.1.3	affected	-
9.22.1.6	affected	-
9.22.2	affected	-
9.22.2.13	affected	-
9.22.2.14	affected	-
9.22.2.4	affected	-
9.22.2.9	affected	-
9.23.1	affected	-
9.23.1.13	affected	-
9.23.1.19	affected	-
9.23.1.3	affected	-
9.23.1.7	affected	-

Cisco

Cisco Secure Firewall Threat Defense (FTD) Software

n/a

Version	Status	Constraints
6.4.0	affected	-
6.4.0.1	affected	-
6.4.0.10	affected	-
6.4.0.11	affected	-
6.4.0.12	affected	-
6.4.0.13	affected	-
6.4.0.14	affected	-
6.4.0.15	affected	-
6.4.0.16	affected	-
6.4.0.17	affected	-
6.4.0.18	affected	-
6.4.0.2	affected	-
6.4.0.3	affected	-
6.4.0.4	affected	-
6.4.0.5	affected	-
6.4.0.6	affected	-
6.4.0.7	affected	-
6.4.0.8	affected	-
6.4.0.9	affected	-
7.0.0	affected	-
7.0.0.1	affected	-
7.0.1	affected	-
7.0.1.1	affected	-
7.0.2	affected	-
7.0.2.1	affected	-
7.0.3	affected	-
7.0.4	affected	-
7.0.5	affected	-
7.0.6	affected	-
7.0.6.1	affected	-
7.0.6.2	affected	-
7.0.6.3	affected	-
7.0.7	affected	-
7.0.8	affected	-
7.0.8.1	affected	-
7.1.0	affected	-
7.1.0.1	affected	-
7.1.0.2	affected	-
7.1.0.3	affected	-
7.2.0	affected	-
7.2.0.1	affected	-
7.2.1	affected	-
7.2.10	affected	-
7.2.10.2	affected	-
7.2.2	affected	-
7.2.3	affected	-
7.2.4	affected	-
7.2.4.1	affected	-
7.2.5	affected	-
7.2.5.1	affected	-
7.2.5.2	affected	-
7.2.6	affected	-
7.2.7	affected	-
7.2.8	affected	-
7.2.8.1	affected	-
7.2.9	affected	-
7.3.0	affected	-
7.3.1	affected	-
7.3.1.1	affected	-
7.3.1.2	affected	-
7.4.0	affected	-
7.4.1	affected	-
7.4.1.1	affected	-
7.4.2	affected	-
7.4.2.1	affected	-
7.4.2.2	affected	-
7.4.2.3	affected	-
7.4.2.4	affected	-
7.6.0	affected	-
7.6.1	affected	-
7.6.2	affected	-
7.6.2.1	affected	-
7.7.0	affected	-
7.7.10	affected	-
7.7.10.1	affected	-

Remediation

No remediation recorded yet.

Metrics

0.26% 0.00264

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00264

Score over time

Mar–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.26% (0.00264)	16.54th	v5 (v2026.06.15)
Jun 15, 2026	0.26% (0.00264)	17.51th	v5 (v2026.06.15)
Mar 5, 2026	0.02% (0.00020)	5.20th	v4 (v2025.03.14)

Weaknesses (1)

CWE-80

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR
Vendor Advisory

Link	Providers	Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Mar 4, 2026

Updated Mar 4, 2026

Reserved Oct 8, 2025

Link CVE-2026-20070

CISA Vulnrichment

Updated Mar 4, 2026

NVD

Status Analyzed

Modified Aug 11, 2026

Link CVE-2026-20070

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-20070