Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-20102

A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the SAML feature and access sensitive, browser-based information. This vulnerability is due to insufficient input validation of multiple HTTP parameters. An attacker could exploit this vulnerability by persuading a user to access a malicio
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:cd2e87010b52ccd4a14981c8d33a51863d17140f6e90650b36a91891790ebcdf
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unknown","product":"Cisco Secure Firewall Threat Defense (FTD) Software","vendor":"Cisco","versions":[{"status":"affected","version":"7.0.0"},{"status":"affected","version":"7.0.0.1"},{"status":"affected","version":"7.0.1"},{"status":"affected","version":"7.1.0"},{"status":"affected","version":"7.0.1.1"},{"status":"affected","version":"7.1.0.1"},{"status":"affected","version":"7.1.0.2"},{"status":"affected","version":"7.1.0.3"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34af6cf6c0b215b867c86023db702f5a31b1d5e65106b4fa01ca89482c740310 · sha256:0ee9d0770f52ad72… · /containers/cna/affected/1

{"defaultStatus":"unknown","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","vendor":"Cisco","versions":[{"status":"affected","version":"9.16.1"},{"status":"affected","version":"9.16.1.28"},{"status":"affected","version":"9.16.2"},{"status":"affected","version":"9.16.2.3"},{"status":"affected","version":"9.16.2.7"},{"status":"affected","version":"9.17.1"},{"status":"affected","version":"9.16.2.11"},{"status":"affected","version":"9.16.2.13"},{"status":"affected","version":"9.16.2.14"},{"status":"affected","version":"9.17.1.7"},{"status":"affected","version":"9.17.1.…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34af6cf6c0b215b867c86023db702f5a31b1d5e65106b4fa01ca89482c740310 · sha256:0ee9d0770f52ad72… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"unknown","product":"Cisco Secure Firewall Threat Defense (FTD) Software","vendor":"Cisco","versions":[{"status":"affected","version":"7.0.0"},{"status":"affected","version":"7.0.0.1"},{"status":"affected","version":"7.0.1"},{"status":"affected","version":"7.1.0"},{"status":"affected","version":"7.0.1.1"},{"status":"affected","version":"7.1.0.1"},{"status":"affected","version":"7.1.0.2"},{"status":"affected","version":"7.1.0.3"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34af6cf6c0b215b867c86023db702f5a31b1d5e65106b4fa01ca89482c740310 · sha256:0ee9d0770f52ad72… · /containers/cna/affected/1
{"defaultStatus":"unknown","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","vendor":"Cisco","versions":[{"status":"affected","version":"9.16.1"},{"status":"affected","version":"9.16.1.28"},{"status":"affected","version":"9.16.2"},{"status":"affected","version":"9.16.2.3"},{"status":"affected","version":"9.16.2.7"},{"status":"affected","version":"9.17.1"},{"status":"affected","version":"9.16.2.11"},{"status":"affected","version":"9.16.2.13"},{"status":"affected","version":"9.16.2.14"},{"status":"affected","version":"9.17.1.7"},{"status":"affected","version":"9.17.1.…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34af6cf6c0b215b867c86023db702f5a31b1d5e65106b4fa01ca89482c740310 · sha256:0ee9d0770f52ad72… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34af6cf6c0b215b867c86023db702f5a31b1d5e65106b4fa01ca89482c740310 · sha256:0ee9d0770f52ad72… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-79","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","lang":"en","type":"cwe"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:34af6cf6c0b215b867c86023db702f5a31b1d5e65106b4fa01ca89482c740310 · sha256:0ee9d0770f52ad72… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"name":"cisco-sa-asaftd-saml-LktTrwZP","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34af6cf6c0b215b867c86023db702f5a31b1d5e65106b4fa01ca89482c740310 · sha256:0ee9d0770f52ad72… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer