What’s Vulnerable › Vulnerabilities

CVE-2016-1295

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-01-16 · updated 2026-06-17
• Weakness: CWE-200

Description

Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775.

Affected products

• Cisco ASA Software: 8.4.0, 8.4.1, 8.4.1.3, 8.4.1.11, 8.4.2, 8.4.2.1 (+20)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-asa
• http://www.securitytracker.com/id/1034691
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-asa
• http://www.securitytracker.com/id/1034691

Get alerted when CVE-2016-1295 or the next vulnerability affects your stack