Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2020-3580

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web services interface of an affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information. Note: These vulnerabilities affect only specific AnyConnect and WebVPN configurations. For more information, see the Vulnerable Products section.

CVSS 6.1 · MediumBuzz score 68.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 68.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 23.0 · diversity 20.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
23.0
9 evidence mentions in the snapshot
Diversity score
20.0
6 sources across 4 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
9 source links · newest first
  • Akira Ransomware Group Made $244 Million in Ransom ProceedsSecurityWeek

    Akira was seen exploiting SonicWall vulnerabilities and encrypting Nutanix Acropolis Hypervisor (AHV) VM disk files this year.

    newswww.securityweek.comNov 14, 2025, 12:04 PM
  • Akira, LockBit actively searching for vulnerable Cisco ASA devicesHelp Net Security

    Akira and Lockbit ransomware groups are trying to breach Cisco ASA SSL VPN devices by exploiting several older vulnerabilities, security researcher Kevin Beaumont is warning. They are targeting vulnerabilities for which patches have been made available in 2020 and 2023. “But the problem is nobody has complete visibility of what exploits actually exist,” he added, and advised admins to upgrade to the latest ASA release on all devices that have the AnyConnect SSL VPN feature … More →

    newswww.helpnetsecurity.comFeb 8, 2024, 12:22 PM
  • Network Security Trends: May-July 2021Unit42

    Network security trends, May-July 2021: We analyze how vulnerabilities are being exploited in the wild and rank the most common types of attacks.

    vendorunit42.paloaltonetworks.comSep 17, 2021, 10:00 PM
  • Week in review: PoC for Windows Print Spooler flaw leaked, conquering synthetic identity fraudHelp Net Security

    Here’s an overview of some of last week’s most interesting news and articles: PoC for critical Windows Print Spooler flaw leaked Microsoft has confirmed that the so-called PrintNightmare vulnerability (CVE-2021-34527) is not the same flaw as the previously patched CVE-2021-1675, and that the leaked PoC exploits can be used to exploit this RCE zero-day. Cisco security devices targeted with CVE-2020-3580 PoC exploit Attackers and bug hunters are leveraging an exploit for CVE-2020-3580 to compromise vulnerable … More →

    newswww.helpnetsecurity.comJul 4, 2021, 8:00 AM
  • Cisco security devices targeted with CVE-2020-3580 PoC exploitHelp Net Security

    Attackers and bug hunters are leveraging an exploit for CVE-2020-3580 to compromise vulnerable security devices running Cisco ASA or FTD software. Active attacks apparently started after Positive Technologies researchers shared proof-of-concept (PoC) exploit code last Thursday via Twitter. 🎁PoC for XSS in Cisco ASA (CVE-2020-3580) POST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1Host: ciscoASA.localContent-Type: application/x-www-form-urlencodedContent-Length: 44 SAMLResponse="> pic.twitter.com/c53MKSK9bg — PT SWARM (@ptswarm) June 24, 2021 About CVE-2020-3580 CVE-2020-3580 was patched by Cisco in October 2020, alonside three additional pre-authentication cross-site … More →

    newswww.helpnetsecurity.comJun 29, 2021, 9:27 AM
  • XSS Vulnerability in Cisco Security Products Exploited in the WildSecurityWeek

    A cross-site scripting (XSS) vulnerability patched last year in Cisco’s Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software has reportedly been exploited in the wild.

    newswww.securityweek.comJun 28, 2021, 11:31 AM
  • Hackers target Cisco ASA devices after a PoC exploit code was published onlineSecurity Affairs

    Experts warn of attacks against Cisco ASA devices after researchers have published a PoC exploit code on Twitter for a known XSS vulnerability. Experts warn of attacks against Cisco ASA devices after researchers from Positive Technologies have published a PoC exploit code on Twitter for the CVE-2020-3580 XSS vulnerability. Tenable experts published an alert about […]

    newssecurityaffairs.comJun 27, 2021, 8:43 AM
  • https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3580www.cisa.gov

    No excerpt available.

    Mitigationwww.cisa.govOct 21, 2020, 7:15 PM
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-xss-multiple-FCB3vPZetools.cisco.com

    No excerpt available.

    Vendor Advisorytools.cisco.comOct 21, 2020, 7:15 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence