Adaptive vulnerabilities (CVEs)

100 CVEs matched to Adaptive by name in NVD, none on CISA's Known Exploited list.

Back to the Adaptive profile · Alternatives to Adaptive · CVE RSS feed

Exploitation riskProbably exploited

100 of 100 CVEs assessed

confirmed exploited

EPSS ≥ 10%

>99%

highest single CVE

Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.

CVE-2008-7257 ↗EPSS 12%LEV ≥>99%Probably exploited
CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows…
CVE-2005-0441 ↗EPSS 8.5%LEV ≥>99%Probably exploited
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary …
CVE-2002-2250 ↗EPSS 7.7%LEV ≥>99%Probably exploited
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll ex…
CVE-2009-1220 ↗EPSS 9.0%LEV ≥>99%Probably exploited
Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlie…
CVE-2009-1201 ↗EPSS 8.8%LEV ≥>99%Probably exploited
Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(…

Recent changes

last 90 days

CVE-2009-1160 is now estimated at a 91% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-09-01 · NVD ↗
CVE-2009-4913 is now estimated at a 97% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-09-01 · NVD ↗
CVE-2007-2463 is now estimated at a 100% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-09-01 · NVD ↗
CVE-2009-1156 is now estimated at a 79% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-09-01 · NVD ↗
CVE-2009-1203 is now estimated at a 100% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-09-01 · NVD ↗

CVE severity over time

CVEs by year and severity

Count of matched CVEs by the year NVD published them.
Year	High	Medium	Low	Total
2011	19	4	0	23
2010	25	10	0	35
2009	4	8	0	12
2008	12	2	0	14
2007	4	2	0	6
2006	0	1	1	2
2005	0	4	0	4
2004	1	0	0	1
2003	0	1	0	1
2002	1	0	0	1
2001	0	1	0	1

Highest EPSS scores

EPSS is FIRST's estimate of the chance a CVE is exploited in the next 30 days. It measures likelihood, not impact.

CVE	EPSS	Percentile
CVE-2008-7257	12%	96%
CVE-2009-1220	9.0%	95%
CVE-2009-1201	8.8%	95%
CVE-2005-0441	8.5%	95%
CVE-2002-2250	7.7%	95%
CVE-2007-2462	6.5%	94%
CVE-2007-2461	4.4%	91%
CVE-2010-0149	4.2%	91%
CVE-2009-1203	3.8%	90%
CVE-2011-0394	3.4%	89%

Known CVEs (100)

RSS ⇢

CVE-2011-0396 ↗HIGH 7.82011
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) …
CVE-2011-0395 ↗HIGH 7.82011
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco P…
↗

How this is counted

CVEs come from the US National Vulnerability Database (NVD) and are matched to Adaptive by vendor name. A name match can include CVEs that concern a similarly named product, and can miss ones filed under another name. The count reflects how widely a vendor's software is deployed and examined as much as anything else, so it is not a measure of how secure the vendor is and should not be used to rank vendors. Latest CVE added here: 2026-08-30.
Known-exploited status comes from the CISA Known Exploited Vulnerabilities (KEV) catalog. Last checked: 2026-10-21.
Exploit probability (EPSS) comes from FIRST. Latest score date: 2026-10-20.