CVE-2020-3580

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web services interface of an affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information. Note: These vulnerabilities affect only specific AnyConnect and WebVPN configurations. For more information, see the Vulnerable Products section.

• CWE-79
• CWE-79

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-xss-multiple-FCB3vPZePatch, Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-xss-multiple-FCB3vPZePatch, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3580US Government Resource

Published

Oct 21, 2020

Last Modified

Aug 11, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35794Certain NETGEAR devices are affected by command injection by…6.8
• CVE-2020-35795Certain NETGEAR devices are affected by a buffer overflow by…9.8
• CVE-2020-35796Certain NETGEAR devices are affected by a buffer overflow by…9.8
• CVE-2020-35797NETGEAR NMS300 devices before 1.6.0.27 are affected by comma…9.8
• CVE-2020-35798Certain NETGEAR devices are affected by command injection by…7.8
• CVE-2020-35799Certain NETGEAR devices are affected by a stack-based buffer…9.8
• CVE-2020-35800Certain NETGEAR devices are affected by incorrect configurat…9.4
• CVE-2020-35801Certain NETGEAR devices are affected by incorrect configurat…7.3
• CVE-2020-35802Certain NETGEAR devices are affected by disclosure of sensit…7.5
• CVE-2020-35803Certain NETGEAR devices are affected by disclosure of sensit…4.4
• CVE-2020-35804Certain NETGEAR devices are affected by disclosure of sensit…4.6
• CVE-2020-35805Certain NETGEAR devices are affected by stored XSS. This aff…4.8