CVE-2020-3580 CISA KEV · Actively exploitedLinked to ransomware
Cross-site scripting in Cisco Secure Firewall Threat Defense
CVSS score
6.1
EPSS probability
%85.6
Risk score
10.4
Published
6 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Automated bulk IP or domain scanner for CVE 2020 3580. Cisco ASA and FTD XSS hunter. (★10)
Makefile Go / Python
GitHub
Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm (★0)
Makefile Go / Python
GitHub
Automated bulk IP scanner Cisco ASA and FTD XSS (★0)
Makefile Go / Python
Nuclei: Cisco ASA/FTD Software - Cross-Site Scripting
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j
Patch verified Public Exploits:30EPSS %100
10.0
CVE-2026-20079 Actively exploitedCisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Workaround Public Exploits:3EPSS %88
8.6
CVE-2026-20230 Actively exploitedCisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Workaround Public Exploits:1EPSS %88
7.5
CVE-2020-3452 Actively exploitedImproper input validation in Cisco Adaptive Security Appliance Software
Workaround Public Exploits:17EPSS %100
7.5
CVE-2018-0296 Actively exploitedImproper input validation in Cisco Firepower Threat Defense
Workaround Public Exploits:10EPSS %100
8.6
CVE-2025-20362 Actively exploitedMissing authorization in Cisco Secure Firewall Threat Defense
Workaround Public Exploits:1EPSS %87
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-3580"