CVE-2019-1701

Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerabilities

MEDIUM

4.8

CVSS Score

Published: May 3, 2019 at 04:00 PM UTC

Updated: August 11, 2026 at 07:33 PM UTC

15 products affected across 1 vendorAdaptive Security ApplianceSecure Firewall Threat DefenseASA 5580

Using Cisco Adaptive Security Appliance (ASA) Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Adaptive Security Appliance (ASA) Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.8

Exploit prediction

EPSS 0.9%

SSVC

No known exploit

Description

Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the WebVPN portal of an affected device. The vulnerabilities exist because the software insufficiently validates user-supplied input on an affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. An attacker would need administrator privileges on the device to exploit these vulnerabilities.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Adaptive Security Appliance · Cisco

95%

v < 9.10.1.17v < 9.4.4.34v < 9.6.4.25v < 9.8.4v < 9.9.2.509.10 ≤ v < 9.10.1.179.5 ≤ v < 9.6.4.259.7 ≤ v < 9.8.49.9 ≤ v < 9.9.2.50

Affected range stops below 9.10.1.17, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.4.4.34, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.6.4.25, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.8.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.9.2.50, so it looks safe — our inference, not a vendor statement

cisco-asa-5505 (environment) · cisco-asa-5510 (environment) · cisco-asa-5512-x (environment) · cisco-asa-5515-x (environment) · cisco-asa-5520 (environment) · cisco-asa-5525-x (environment) · cisco-asa-5540 (environment) · cisco-asa-5545-x (environment) · cisco-asa-5550 (environment) · cisco-asa-5555-x (environment) · cisco-asa-5580 (environment) · cisco-asa-5585-x (environment)

Secure Firewall Threat Defense · Cisco

95%

6.2.1 ≤ v < 6.2.3.126.3.0 ≤ v < 6.3.0.3

Firepower Threat Defense · Cisco

60%

v < 6.2.3.12v < 6.3.0.3

Affected range stops below 6.2.3.12, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.3.0.3, so it looks safe — our inference, not a vendor statement

ASA 5505 · Ciscodevice

80%

All versions

ASA 5510 · Ciscodevice