AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-0677

HIGH · CVSS 7.8 EPSS 1.90%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-04-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2015-0677
Severity
HIGH
CVSS
7.8
EPSS
1.90%
Cisco

Original NVD Description

The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4), and 9.3 before 9.3(3), when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a denial of service (VPN outage or device reload) via a crafted XML document, aka Bug ID CSCus95290.