Vulnerability Database

328,409

Total vulnerabilities in the database

Vulnerabilities for products matching "firepower_extensible_operating_system"

Found 1 matching product.

You can search for specific versions with /product/firepower_extensible_operating_system/1.2.3

cisco / firepower_extensible_operating_system

52 vulnerabilities found
Title Severity Exploit Date Affected Version
CVE-2024-20294
Medium February 29, 2024 2/29/24
== 2.10.1.159
== 2.10.1.166
== 2.10.1.179
== 2.10.1.207
== 2.10.1.234
== 2.10.1.245
== 2.10.1.271
== 2.11.1.154
== 2.11.1.182
== 2.11.1.200
== 2.11.1.205
== 2.12.0.31
== 2.12.0.432
== 2.12.0.450
== 2.12.0.467
== 2.12.0.498
== 2.12.1.29
== 2.12.1.48
== 2.13.0.198
== 2.13.0.212
== 2.13.0.243
== 2.14.1.131
== 2.2.1.63
== 2.2.1.66
== 2.2.1.70
== 2.2.2.101
== 2.2.2.137
== 2.2.2.148
== 2.2.2.149
== 2.2.2.17
== 2.2.2.19
== 2.2.2.24
== 2.2.2.26
== 2.2.2.28
== 2.2.2.54
== 2.2.2.60
== 2.2.2.71
== 2.2.2.83
== 2.2.2.86
== 2.2.2.91
== 2.2.2.97
== 2.3.1.110
== 2.3.1.111
== 2.3.1.130
== 2.3.1.144
== 2.3.1.145
== 2.3.1.155
== 2.3.1.166
== 2.3.1.173
== 2.3.1.179
== 2.3.1.180
== 2.3.1.190
== 2.3.1.215
== 2.3.1.216
== 2.3.1.219
== 2.3.1.230
== 2.3.1.56
== 2.3.1.58
== 2.3.1.66
== 2.3.1.73
== 2.3.1.75
== 2.3.1.88
== 2.3.1.91
== 2.3.1.93
== 2.3.1.99
== 2.6.1.131
== 2.6.1.157
== 2.6.1.166
== 2.6.1.169
== 2.6.1.174
== 2.6.1.187
== 2.6.1.192
== 2.6.1.204
== 2.6.1.214
== 2.6.1.224
== 2.6.1.229
== 2.6.1.230
== 2.6.1.238
== 2.6.1.239
== 2.6.1.254
== 2.6.1.259
== 2.6.1.264
== 2.6.1.265
== 2.8.1.105
== 2.8.1.125
== 2.8.1.139
== 2.8.1.143
== 2.8.1.152
== 2.8.1.162
== 2.8.1.164
== 2.8.1.172
== 2.8.1.186
== 2.8.1.190
== 2.8.1.198
== 2.9.1.131
== 2.9.1.135
== 2.9.1.143
== 2.9.1.150
== 2.9.1.158
CVE-2022-20934
Medium November 15, 2022 11/15/22
== 2.0.1.68
== 2.0.1.201
== 2.0.1.86
== 2.0.1.37
== 2.0.1.135
== 2.0.1.141
== 2.0.1.144
== 2.0.1.148
== 2.0.1.149
== 2.0.1.153
== 2.0.1.159
== 2.0.1.188
== 2.0.1.203
== 2.0.1.204
== 2.0.1.206
== 2.1.1.64
== 2.1.1.73
== 2.1.1.77
== 2.1.1.83
== 2.1.1.85
== 2.1.1.86
== 2.1.1.97
== 2.1.1.106
== 2.1.1.107
== 2.1.1.113
== 2.1.1.115
== 2.1.1.116
== 1.1.1.147
== 1.1.1.160
== 1.1.2.51
== 1.1.2.178
== 1.1.3.84
== 1.1.3.86
== 1.1.3.97
== 1.1.4.95
== 1.1.4.117
== 1.1.4.140
== 1.1.4.169
== 1.1.4.175
== 1.1.4.178
== 1.1.4.179
== 2.2.1.63
== 2.2.1.66
== 2.2.1.70
== 2.2.2.17
== 2.2.2.19
== 2.2.2.24
== 2.2.2.26
== 2.2.2.28
== 2.2.2.54
== 2.2.2.60
== 2.2.2.71
== 2.2.2.83
== 2.2.2.86
== 2.2.2.91
== 2.2.2.97
== 2.2.2.101
== 2.2.2.137
== 2.2.2.148
== 2.2.2.149
== 2.3.1.99
== 2.3.1.93
== 2.3.1.91
== 2.3.1.88
== 2.3.1.75
== 2.3.1.73
== 2.3.1.66
== 2.3.1.58
== 2.3.1.130
== 2.3.1.111
== 2.3.1.110
== 2.3.1.144
== 2.3.1.145
== 2.3.1.155
== 2.3.1.166
== 2.3.1.173
== 2.3.1.179
== 2.3.1.180
== 2.3.1.56
== 2.3.1.190
== 2.3.1.215
== 2.3.1.216
== 2.3.1.219
== 2.4.1.101
== 2.4.1.214
== 2.4.1.222
== 2.4.1.234
== 2.4.1.238
== 2.4.1.244
== 2.4.1.249
== 2.4.1.252
== 2.4.1.266
== 2.4.1.268
== 2.4.1.273
== 2.6.1.131
== 2.6.1.157
== 2.6.1.166
== 2.6.1.169
== 2.6.1.174
== 2.6.1.187
== 2.6.1.192
== 2.6.1.204
== 2.6.1.214
== 2.6.1.224
== 2.6.1.229
== 2.6.1.230
== 2.6.1.238
== 2.6.1.239
== 2.6.1.254
== 2.7.1.92
== 2.7.1.98
== 2.7.1.106
== 2.7.1.122
== 2.7.1.131
== 2.7.1.143
== 2.8.1.105
== 2.8.1.125
== 2.8.1.139
== 2.8.1.143
== 2.8.1.152
== 2.8.1.162
== 2.8.1.164
== 2.8.1.172
== 2.9.1.131
== 2.9.1.135
== 2.9.1.143
== 2.9.1.150
== 2.9.1.158
== 2.10.1.159
== 2.10.1.166
== 2.10.1.179
== 2.11.1.154
CVE-2022-20625
Low February 23, 2022 2/23/22
< 2.3.1.219
>= 2.4 < 2.9.1.158
>= 2.10 < 2.10.1.179
CVE-2021-34714
High September 23, 2021 9/23/21
<= 8.4\(3.115\)
<= 7.0\(3\)i7\(9\)
<= 7.3\(8\)n1\(1\)
<= 3.2\(3o\)a
<= 4.1\(1a\)a
CVE-2021-1368
High February 24, 2021 2/24/21
== r231
CVE-2020-3455
High October 21, 2020 10/21/20
< 2.4.1.268
>= 2.6 < 2.6.1.214
>= 2.7 < 2.7.1.131
CVE-2020-3456
High October 21, 2020 10/21/20
== 2.4(1.249)
CVE-2020-3457
Medium October 21, 2020 10/21/20
>= 2.4 < 2.4.1.266
>= 2.6 < 2.6.1.204
>= 2.7 < 2.7.1.131
>= 2.8 < 2.8.1.125
CVE-2020-3459
High October 21, 2020 10/21/20
< 2.4.1.266
>= 2.6 < 2.6.1.204
>= 2.7 < 2.7.1.131
>= 2.8 < 2.8.1.125
CVE-2020-3545
Medium September 4, 2020 9/4/20
<= 2.3.1.58
CVE-2020-3517
High August 27, 2020 8/27/20
>= 1.1 < 1.1.4.179
>= 2.0 < 2.0.1.153
>= 2.1 < 2.1.1.86
>= 2.2 < 2.2.1.70
CVE-2020-3172
High February 26, 2020 2/26/20
< 2.6.1.187
>= 2.7 < 2.7.1.106
CVE-2020-3169
Medium February 26, 2020 2/26/20
>= 2.2 < 2.2.2.97
>= 2.3 < 2.3.1.144
>= 2.4 < 2.4.1.234
CVE-2020-3167
High February 26, 2020 2/26/20
< 2.4.1.234
CVE-2020-3166
Medium February 26, 2020 2/26/20
< 2.2.2.97
>= 2.3 < 2.3.1.155
>= 2.4 < 2.4.1.238
>= 2.6 < 2.6.1.157
CVE-2020-3120
Medium February 5, 2020 2/5/20
<= 2.3.1.173
>= 2.6 < 2.6.1.187
>= 2.7 < 2.7.1.106
CVE-2019-1734
Medium November 5, 2019 11/5/19
< 2.2.2.91
>= 2.3 < 2.3.1.111
>= 2.4 < 2.4.1.101
CVE-2019-12700
Medium October 2, 2019 10/2/19
<= 2.2
>= 2.3 < 2.3.1.155
>= 2.4 < 2.6.1.131
CVE-2019-12699
High October 2, 2019 10/2/19
>= 2.0 < 2.2.2.101
>= 2.3 < 2.3.1.155
>= 2.4 < 2.4.1.238
CVE-2019-1780
Medium May 16, 2019 5/16/19
< 2.3.1.130
>= 2.4 < 2.4.1.122
CVE-2019-1858
High May 16, 2019 5/16/19
>= 2.6 < 2.6.1.131
CVE-2019-1795
Medium May 15, 2019 5/15/19
< 2.0.1.201
>= 2.1 < 2.2.2.54
>= 2.3 < 2.3.1.73
>= 2.4 < 2.4.1.101
CVE-2019-1779
Medium May 15, 2019 5/15/19
< 2.4.1.101
CVE-2019-1600
Low March 7, 2019 3/7/19
>= 1.1 < 2.2.2.91
>= 2.3 < 2.3.1.110
CVE-2019-1598
High March 7, 2019 3/7/19
>= 2.3 < 2.3.1.75
>= 2.1 < 2.2.2.54
< 2.0.1.201
CVE-2019-1597
High March 7, 2019 3/7/19
>= 2.2.2.54.x < 2.3.1.75
>= 2.0.1.201.x < 2.2.2.54
< 2.0.1.201
CVE-2018-0395
Low October 17, 2018 10/17/18
== r231
CVE-2018-0331
Medium June 21, 2018 6/21/18
>= 1.1 < 2.0.1.153
>= 2.1.1 < 2.1.1.86
>= 2.2.1 < 2.2.1.70
CVE-2018-0311
High June 21, 2018 6/21/18
>= 1.1 < 1.1.4.179
>= 2.0 < 2.0.1.153
>= 2.1.1 < 2.1.1.86
>= 2.2.1 < 2.2.1.70
>= 2.2.2 < 2.2.2.17
CVE-2018-0310
High June 21, 2018 6/21/18
>= 1.1 < 1.1.4.179
>= 2.0 < 2.0.1.153
>= 2.1.1 < 2.1.1.86
>= 2.2.1 < 2.2.1.70
>= 2.2.2 < 2.2.2.17
CVE-2018-0303
High June 21, 2018 6/21/18
>= 1.1 < 1.1.4.179
>= 2.0 < 2.0.1.153
>= 2.1.1 < 2.1.1.86
>= 2.2.1 < 2.2.1.70
>= 2.2.2 < 2.2.2.17
CVE-2018-0302
High June 21, 2018 6/21/18
>= 1.1 < 1.1.4.169
>= 2.0 < 2.0.1.135
CVE-2018-0298
High June 21, 2018 6/21/18
>= 1.1 < 1.1.4.169
>= 2.0 < 2.0.1.135
>= 1.1 < 1.1.4.179
>= 2.0 < 2.0.1.153
CVE-2018-0294
High June 20, 2018 6/20/18
>= 2.1.1 < 2.1.1.86
>= 2.2 < 2.2.2.17
CVE-2017-12299
Medium November 16, 2017 11/16/17
== 2.2(1.58)
CVE-2017-12277
High November 2, 2017 11/2/17
<= 1.1.3
== 1.1.4
== 2.0.1
CVE-2017-3883
Medium October 19, 2017 10/19/17
<= 2.3
CVE-2017-6597
High April 7, 2017 4/7/17
== 2.0(1.68)
CVE-2017-6598
High April 7, 2017 4/7/17
== 2.0(1.68)
CVE-2017-6600
High April 7, 2017 4/7/17
== 2.0(1.68)
CVE-2017-6601
Low April 7, 2017 4/7/17
== 2.0(1.68)
CVE-2017-6602
Low April 7, 2017 4/7/17
== 2.0(1.68)
CVE-2015-6435
High January 22, 2016 1/22/16
== 1.1(1.86)
== 1.1(1.160)
== 1.1.1
CVE-2015-6380
Medium November 24, 2015 11/24/15
== 1.1(1.160)
CVE-2015-6374
Low November 19, 2015 11/19/15
== 1.1(1.160)
CVE-2015-6371
Low November 19, 2015 11/19/15
== 1.1(1.160)
CVE-2015-6370
High November 19, 2015 11/19/15
== 1.1(1.160)
CVE-2015-6369
Low November 19, 2015 11/19/15
== 1.1(1.160)
CVE-2015-6368
Medium November 19, 2015 11/19/15
== 1.1(1.160)
CVE-2015-6373
Medium November 18, 2015 11/18/15
== 1.1(1.160)

Frequently Asked Questions

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

CVSS (Common Vulnerability Scoring System) estimates technical severity, but it doesn't automatically equal business risk. Prioritize using context like internet exposure, affected asset criticality, known exploitation (proof-of-concept or in-the-wild), and whether compensating controls exist. A "Medium" CVSS on an exposed, production system can be more urgent than a "Critical" on an isolated, non-production host.

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. In practice, risk increases sharply when exploitation becomes reliable or widespread.

Recurring findings usually come from incomplete Asset Discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host. Unknown or unmanaged assets (often called Shadow IT) are a common reason the same issues resurface.

Use a simple, repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress using consistent metrics so remediation is steady, not reactive.

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.