Vendor / Project: Cisco Product: Adaptive Security Appliance (ASA) Description: Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure. Required Action: Apply updates per vendor instructions. Due Date: 2022-05-03 Ransomware Campaign Use: Unknown CWEs: CWE-20 Notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0296