CVE-2022-20737

score

<0.1

cvss

8.5

epss

1.2%

published

2022-05-03

kev added

—

first seen

2026-10-21

Cisco ASA Software contains a denial of service caused by insufficient bounds checking in HTTP authentication handler for resources accessed through the Clientless SSL VPN portal, letting authenticated attackers cause device reload or memory disclosure, exploit requires attacker to control a web server accessible through the VPN portal.