Cisco ASA/FTD WebVPN/AnyConnect Improper Input Validation (CVE-2020-3452)

Version 1.3

Jul 21, 2026, 8:31 PM

CISA reference
CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N")
CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
CVSSv2 severity (based on CVE-2020-3452, severity decreased from "High" to "Medium")
Exploit attributes ("Exploitability ease" set to "Exploits are available")