© 2026 vulntracker.io

CVE-2016-1385

N/A

Published: May 26, 2016 at 03:00 PM UTC

Updated: June 17, 2026 at 12:41 AM UTC

1 product affected across 1 vendorAdaptive Security Appliance

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1%

Description

The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (instability, memory consumption, or device reload) by leveraging (1) administrative access or (2) Clientless SSL VPN access to provide a crafted XML document, aka Bug ID CSCut14209.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Adaptive Security Appliance · Cisco

95%

8.4.08.4.18.4.1.118.4.1.38.4.28.4.2.1 8.4.2.88.4.38.4.3.8 8.4.3.9 8.4.4 8.4.4.1 8.4.4.3 8.4.4.5 8.4.4.98.4.58.4.5.68.4.68.4.7 8.4.7.15 8.4.7.22 8.4.7.23 8.4.7.26 8.4.7.28 8.4.7.29 8.4.7.38.5.18.5.1.1 8.5.1.148.5.1.178.5.1.18 8.5.1.19 8.5.1.21 8.5.1.24 8.5.1.6 8.5.1.78.6.18.6.1.18.6.1.108.6.1.12 8.6.1.13 8.6.1.14 8.6.1.17 8.6.1.2 8.6.1.5 8.7.1 8.7.1.1 8.7.1.11 8.7.1.13 8.7.1.16 8.7.1.178.7.1.38.7.1.4 8.7.1.7 8.7.1.89.0.19.0.29.0.2.109.0.39.0.3.6 9.0.3.8 9.0.4 9.0.4.1 9.0.4.17 9.0.4.20 9.0.4.24 9.0.4.26 9.0.4.29 9.0.4.33 9.0.4.35 9.0.4.37 9.0.4.5 9.0.4.7 9.1.1 9.1.1.4 9.1.2 9.1.2.89.1.39.1.3.2 9.1.4 9.1.4.5 9.1.5 9.1.5.10 9.1.5.12 9.1.5.15 9.1.5.21 9.1.6 9.1.6.1 9.1.6.10 9.1.6.4 9.1.6.6 9.1.6.8 9.2(0.0)9.2(0.104)9.2(3.1)9.2.1 9.2.2 9.2.2.4 9.2.2.7 9.2.2.8 9.2.3 9.2.3.39.2.3.49.2.4 9.2.4.2 9.2.4.4 9.3(1.105)9.3(1.50)9.3(2.100)9.3(2.243)9.3.1 9.3.1.1 9.3.2 9.3.2.29.3.39.3.3.1 9.3.3.2 9.3.3.5 9.3.3.6 9.3.59.4.0.1159.4.19.4.1.19.4.1.2 9.4.1.3 9.4.1.5 9.4.2 9.4.2.3 9.5.1 9.5.2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-xml

References (2)

Vendor Advisoryx_refsource_CISCO

Source: [email protected]

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-xml

VDB Entryx_refsource_SECTRACK

Source: [email protected]

http://www.securitytracker.com/id/1035976

CVSS

6.8MEDIUM[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-119CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card