CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-20102

A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the SAML feature and access sensitive, browser-based information. This vulnerability is due to insufficient input validation of multiple HTTP parameters. An attacker could exploit this vulnerability by persuading a user to access a malicious link. A successful exploit could allow the attacker to conduct a reflected XSS attack through an affected device.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.5%

CVSS Severity

CVSS v3 Score 6.1

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP

Products affected by CVE-2026-20102

Cisco » Firepower Threat Defense Software » Version: Any

cpe:2.3:a:cisco:firepower_threat_defense_software:*
Cisco » Firepower Threat Defense Software » Version: 7.0.0

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0
Cisco » Firepower Threat Defense Software » Version: 7.0.0.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0.1
Cisco » Firepower Threat Defense Software » Version: 7.0.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1
Cisco » Firepower Threat Defense Software » Version: 7.0.1.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1.1
Cisco » Firepower Threat Defense Software » Version: 7.0.2

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2
Cisco » Firepower Threat Defense Software » Version: 7.0.2.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2.1
Cisco » Firepower Threat Defense Software » Version: 7.0.3

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.3
Cisco » Firepower Threat Defense Software » Version: 7.0.4

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.4
Cisco » Firepower Threat Defense Software » Version: 7.0.5

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.5
Cisco » Firepower Threat Defense Software » Version: 7.0.6

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6
Cisco » Firepower Threat Defense Software » Version: 7.0.6.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.1
Cisco » Firepower Threat Defense Software » Version: 7.0.6.2

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.2
Cisco » Firepower Threat Defense Software » Version: 7.1.0

cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0
Cisco » Firepower Threat Defense Software » Version: 7.1.0.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.1
Cisco » Firepower Threat Defense Software » Version: 7.1.0.2

cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.2
Cisco » Firepower Threat Defense Software » Version: 7.1.0.3

cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.3
Cisco » Firepower Threat Defense Software » Version: 7.2.0

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0
Cisco » Firepower Threat Defense Software » Version: 7.2.0.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0.1
Cisco » Firepower Threat Defense Software » Version: 7.2.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.1
Cisco » Firepower Threat Defense Software » Version: 7.2.2

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.2
Cisco » Firepower Threat Defense Software » Version: 7.2.3

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.3
Cisco » Firepower Threat Defense Software » Version: 7.2.4

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4
Cisco » Firepower Threat Defense Software » Version: 7.2.4.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4.1
Cisco » Firepower Threat Defense Software » Version: 7.2.5

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5
Cisco » Firepower Threat Defense Software » Version: 7.2.5.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.1
Cisco » Firepower Threat Defense Software » Version: 7.2.5.2

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.2
Cisco » Firepower Threat Defense Software » Version: 7.2.6

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.6
Cisco » Firepower Threat Defense Software » Version: 7.2.7

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.7
Cisco » Firepower Threat Defense Software » Version: 7.2.8

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8
Cisco » Firepower Threat Defense Software » Version: 7.2.8.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8.1
Cisco » Firepower Threat Defense Software » Version: 7.4.0

cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0
Cisco » Firepower Threat Defense Software » Version: 7.4.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1
Cisco » Firepower Threat Defense Software » Version: 7.4.1.1

cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1.1
Cisco » Firepower Threat Defense Software » Version: 7.4.2

cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2
Cisco » Adaptive Security Appliance Software » Version: 9.16.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1
Cisco » Adaptive Security Appliance Software » Version: 9.16.1.28

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28
Cisco » Adaptive Security Appliance Software » Version: 9.16.2

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.11

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.13

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.14

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3
Cisco » Adaptive Security Appliance Software » Version: 9.16.2.7

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7
Cisco » Adaptive Security Appliance Software » Version: 9.16.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.14

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.15

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.19

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.23

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23
Cisco » Adaptive Security Appliance Software » Version: 9.16.3.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3
Cisco » Adaptive Security Appliance Software » Version: 9.16.4

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.14

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.18

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.18
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.19

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.27

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.38

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.39

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.42

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.48

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.55

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.57

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.61

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.62

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.62
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.67

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.67
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.70

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.70
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.84

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.84
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.85

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.85
Cisco » Adaptive Security Appliance Software » Version: 9.16.4.9

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9
Cisco » Adaptive Security Appliance Software » Version: 9.17.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.10

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.11

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.13

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.15

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.20

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.30

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.33

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.39

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.45

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.45
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.7

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7
Cisco » Adaptive Security Appliance Software » Version: 9.17.1.9

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9
Cisco » Adaptive Security Appliance Software » Version: 9.18

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18
Cisco » Adaptive Security Appliance Software » Version: 9.18.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1
Cisco » Adaptive Security Appliance Software » Version: 9.18.1.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3
Cisco » Adaptive Security Appliance Software » Version: 9.18.2

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2
Cisco » Adaptive Security Appliance Software » Version: 9.18.2.5

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5
Cisco » Adaptive Security Appliance Software » Version: 9.18.2.7

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7
Cisco » Adaptive Security Appliance Software » Version: 9.18.2.8

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8
Cisco » Adaptive Security Appliance Software » Version: 9.18.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.39

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.46

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.53

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.55

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55
Cisco » Adaptive Security Appliance Software » Version: 9.18.3.56

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56
Cisco » Adaptive Security Appliance Software » Version: 9.18.4

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.22

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.24

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.29

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.34

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.34
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.40

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.40
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.47

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.47
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.5

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.57

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.57
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.67

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.67
Cisco » Adaptive Security Appliance Software » Version: 9.18.4.8

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8
Cisco » Adaptive Security Appliance Software » Version: 9.20.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1
Cisco » Adaptive Security Appliance Software » Version: 9.20.1.5

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5
Cisco » Adaptive Security Appliance Software » Version: 9.20.2

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2
Cisco » Adaptive Security Appliance Software » Version: 9.20.2.10

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10
Cisco » Adaptive Security Appliance Software » Version: 9.20.2.21

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21
Cisco » Adaptive Security Appliance Software » Version: 9.20.2.22

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22
Cisco » Adaptive Security Appliance Software » Version: 9.20.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3
Cisco » Adaptive Security Appliance Software » Version: 9.20.3.16

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.16
Cisco » Adaptive Security Appliance Software » Version: 9.20.3.4

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.4
Cisco » Adaptive Security Appliance Software » Version: 9.20.3.7

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.7
Cisco » Adaptive Security Appliance Software » Version: 9.20.4.10

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.10
Cisco » Adaptive Security Appliance Software » Version: 9.22.1.1

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.1
Cisco » Adaptive Security Appliance Software » Version: 9.22.1.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.3
Cisco » Adaptive Security Appliance Software » Version: 9.22.2

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2
Cisco » Adaptive Security Appliance Software » Version: 9.22.2.14

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.14
Cisco » Adaptive Security Appliance Software » Version: 9.23.1.19

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.19
Cisco » Adaptive Security Appliance Software » Version: 9.23.1.3

cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-20102

Products

Pricing

Contact Us