Summary

• Cisco released its semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication on April 27, 2022. In direct response to customer feedback, Cisco releases bundles of Cisco ASA, FMC, and FTD Software Security Advisories on the fourth Wednesday of the month in April and October of each calendar year.

  The April 27, 2022, release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication includes 17 Cisco Security Advisories that describe 19 vulnerabilities in Cisco ASA, FMC, and FTD. Cisco has released software updates that address these vulnerabilities.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  cisco-sa-asaftd-mgmt-privesc-BMFMUvye Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability	CVE-2022-20759	High	8.8
  cisco-sa-asaftd-dos-nJVAwOeq Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability	CVE-2022-20760	High	8.6
  cisco-sa-asa-dos-tL4uA4AA Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability	CVE-2022-20715	High	8.6
  cisco-sa-asafdt-webvpn-dos-tzPSYern Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability	CVE-2022-20745	High	8.6
  cisco-sa-ftd-dos-JnnJm4wB Cisco Firepower Threat Defense Software Denial of Service Vulnerability	CVE-2022-20757	High	8.6
  cisco-sa-FTD-snort3-DOS-Aq38LVdM Cisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability	CVE-2022-20767	High	8.6
  cisco-sa-ftd-snort-dos-hd2hFgM Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability	CVE-2022-20751	High	8.6
  cisco-sa-ftd-tcp-dos-kM9SHhOu Cisco Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability	CVE-2022-20746	High	8.6
  cisco-sa-asa-ssl-vpn-heap-zLX3FdX Cisco Adaptive Security Appliance Software Clientless SSL VPN Heap Overflow Vulnerability	CVE-2022-20737	High	8.5
  cisco-sa-asaftd-ipsec-mitm-CKnLr4 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability	CVE-2022-20742	High	7.4
  cisco-sa-fmc-security-bypass-JhOd29Gg Cisco Firepower Management Center File Upload Security Bypass Vulnerability	CVE-2022-20743	High	6.5
  cisco-sa-fmc-xss-SfpEcvGT Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability	CVE-2022-20740	Medium	6.1
  cisco-sa-fmc-xss-qXz4uAkM Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities	CVE-2022-20627 CVE-2022-20628 CVE-2022-20629	Medium	5.4
  cisco-sa-ftd-amp-local-dos-CUfwRJXT Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerability	CVE-2022-20748	Medium	5.3
  cisco-sa-ftd-xmlinj-8GWjGzKe Cisco Firepower Threat Defense Software XML Injection Vulnerability	CVE-2022-20729	Medium	4.4
  cisco-sa-fmc-infdisc-guJWRwQu Cisco Firepower Management Center Software Information Disclosure Vulnerability	CVE-2022-20744	Medium	4.3
  cisco-sa-ftd-sidns-bypass-3PzA5pO Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability	CVE-2022-20730	Medium	4

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A