WS
Product
Web Security Appliance
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 20Medium 25Low 0
Watch
Add Web Security Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20032 | 9.8 | Mar 1 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and… Affected: before 12.5.6; 14.0.0 before 14.0.4-005; 14.5.0 before 14.5.1-013; 15.0.0 before 15.0.0-254 |
| CVE-2021-1359 | 8.8 | Jul 8 | A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection… Affected: 11.8.0-429; 11.8.0-453 |
| CVE-2019-15956 | 8.8 | Nov 26 | A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an… Affected: 10.5.2-072; 11.5.1-fcs-125; 11.7.0-fcs-418 |
| CVE-2019-1886 | 8.6 | Jul 4 | A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition Affected: 10.5.2-072; 10.5.3-025; 11.7.0-fcs-334 |
| CVE-2018-0410 | 8.6 | Aug 15 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to exhaust system memory… Affected: 9.1.1-074; 9.1.2-010; 9.1.2-022; 9.1.2-039; 10.1.0-204; 10.1.1-235; +4 more |
| CVE-2019-1816 | 7.8 | May 3 | A vulnerability in the log subscription subsystem of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate… Affected: 10.5.2-072; 11.0.0-641; 11.5.0-fcs-614; wsa10.5.0-fcs-000 |
| CVE-2019-1817 | 7.5 | May 3 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an unauthenticated, remote attacker to cause a denial of… Affected: 11.5.1-fcs-115; 11.5.1-fcs-124; 11.5.1-fcs-125; 11.7.0-fcs-334 |
| CVE-2018-0353 | 7.5 | Jun 7 | A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor (L4TM)… Affected: 10.5.1; 10.5.1-296; 10.5.2; 11.0.0; 11.5.0-fcs-442 |
| CVE-2017-6751 | 7.5 | Jul 25 | A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy… Affected: 9.0.0-162; 9.0.0-193; 9.0.0-485; 10.0.0-232; 10.0.0-233; 10.1.0-204 |
| CVE-2017-6750 | 7.5 | Jul 25 | A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user… Affected: 10.0.0-232; 10.0.0-233; 10.0_base; 10.1.0; 10.1.0-204; 10.1.1-230; +4 more |
| CVE-2016-9212 | 7.5 | Dec 14 | A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote… Affected: 9.0.1-162; 9.1.1-074 |
| CVE-2016-6469 | 7.5 | Dec 14 | A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 9.0.1-162; 9.1.1-074 |
| CVE-2016-6372 | 7.5 | Oct 28 | A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security… Affected: 5.6.0-623; 6.0.0-000; 7.1.0; 7.1.1; 7.1.2; 7.1.3; +34 more |
| CVE-2016-6360 | 7.5 | Oct 28 | A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to… Affected: 8.8.0-085; 9.0.0-193; 9.0_base; 9.1.0-000; 9.1.0-070; 9.1_base; +4 more |
| CVE-2016-6407 | 7.5 | Sep 17 | Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for… Affected: 5.6.0-623; 6.0.0-000; 7.1.0; 7.1.1; 7.1.2; 7.1.3; +34 more |
| CVE-2016-1405 | 7.5 | Jun 8 | libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance… Affected: 8.8.0-085; 9.1.0-070; 9.5.0-284 |
| CVE-2016-1381 | 7.5 | May 25 | Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via… Affected: 8.5.0-497; 8.5.0.000; 8.5.1-021; 8.5.2-024; 8.5.2-027; 8.5.3-055; +4 more |
| CVE-2016-1380 | 7.5 | May 25 | Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (proxy-process hang) via a crafted HTTP POST… Affected: 8.0.0-000; 8.0.5; 8.0.6; 8.0.6-078; 8.0.6-119; 8.0.7; +8 more |
| CVE-2016-1296 | 7.5 | Jan 20 | The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via… Affected: 8.5.3-055; 9.1.0-000; 9.5.0-235 |
| CVE-2021-1566 | 7.4 | Jun 16 | A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance… Affected: All versions, or not specified |
| CVE-2017-6746 | 7.2 | Jul 25 | A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to… Affected: 10.0.0-233; 10.0_base; 10.1.0; 10.1.0-204; 10.1.1-230; 10.1.1-234; +5 more |
| CVE-2018-0428 | 6.7 | Aug 15 | A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root Affected: 11.0.0-fcs-250; 11.5.0-fcs-000; wsa10.0.0-959; wsa10.5.0-fcs-000 |
| CVE-2017-6748 | 6.7 | Jul 25 | A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to… Affected: 10.0.0-232; 10.0.0-233; 10.0_base; 10.1.0; 10.1.0-204; 10.1.1-230; +4 more |
| CVE-2021-1516 | 6.5 | May 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and… Affected: All versions, or not specified |
| CVE-2019-1884 | 6.5 | Jul 4 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of… Affected: 10.1.4-017; 10.5.2-072; 11.5.1-fcs-125; 11.7.0-256 |
| CVE-2023-20120 | 6.1 | Jun 28 | Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email… Affected: 14.0.0-418; 14.0.1-033; 14.0.1-053; 15.0.0-050; 15.0.0-256 |
| CVE-2023-20119 | 6.1 | Jun 28 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance… Affected: 14.0.0-418; 14.0.1-033; 14.0.1-053; 15.0.0-050; 15.0.0-256 |
| CVE-2021-1490 | 6.1 | May 6 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a… Affected: before 14.0 |
| CVE-2019-15969 | 6.1 | Sep 23 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS)… Affected: before 11.8.0 |
| CVE-2018-0406 | 6.1 | Aug 1 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected or Document… Affected: 10.1.2-003; 10.5.1-269; 11.5.0-fcs-581 |
| CVE-2018-0366 | 6.1 | Jul 16 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: 10.1.2-003; 10.5.1-276 |
| CVE-2018-0093 | 6.1 | Jan 18 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: All versions, or not specified |
| CVE-2016-1411 | 5.9 | Dec 14 | A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management… Affected: 7.7.0-608; 7.7.5-835; 8.8.0-000 |
| CVE-2016-6416 | 5.9 | Oct 5 | The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and… Affected: 9.0.0-162; 9.1.0-000; 9.1.0-070; 9.1_base; 9.5.0-235; 9.5.0-284; +2 more |
| CVE-2019-1672 | 5.8 | Feb 8 | Cisco Web Security Appliance Decryption Policy Bypass Vulnerability Affected: 10.1.0-204; 10.5.2-072; 11.5.1-fcs-115 |
| CVE-2017-3870 | 5.8 | Mar 17 | A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a… Affected: 8.5.3-069; 9.1.1-074; 9.1.2-010 |
| CVE-2017-3827 | 5.8 | Feb 22 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA)… Affected: 10.0.0-082; 10.0.0-124; 10.0.0-125; 10.0.0-203; 10.0.0-232 |
| CVE-2023-20028 | 5.4 | Jun 28 | Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email… Affected: 14.0.0-418; 14.0.1-033; 14.0.1-053; 15.0.0-050; 15.0.0-256 |
| CVE-2017-6749 | 5.4 | Jul 25 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting… Affected: 10.0.0-232; 10.0.0-233; 10.0_base; 10.1.0; 10.1.0-204; 10.1.1-230; +5 more |
| CVE-2022-20784 | 5.3 | Apr 6 | A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to… Affected: 11.7.0 before 14.0.2 |
| CVE-2021-1129 | 5.3 | Jan 20 | A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and… Affected: 11.8.0 |
| CVE-2020-3164 | 5.3 | Mar 4 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security… Affected: through 12.0.1-268 |
| CVE-2016-1440 | 5.3 | Jul 2 | The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP… Affected: 5.6.0-623; 6.0.0-000; 7.1.0; 7.1.1; 7.1.2; 7.1.3; +31 more |
| CVE-2016-1288 | 5.3 | Mar 3 | The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service… Affected: 9.0.0-193 |
| CVE-2020-3117 | 4.7 | Sep 23 | A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated,… Affected: 11.8.0-382; 12.0.1-268 |
| CVE-2017-6783 | 4.3 | Aug 17 | A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) could allow an… Affected: 10.0.0-230 |
| CVE-2015-6386 | – | Dec 1 | The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service (CPU… Affected: 8.0.7-142; 8.5.1-021 |
| CVE-2015-6298 | – | Nov 6 | The admin web interface in Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security… Affected: 8.5.0-497 |
| CVE-2015-6292 | – | Nov 6 | The proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8.5.2-004, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web… Affected: 8.0.0-000; 8.0.5; 8.0.5; 8.0.6; 8.0.6-119; 8.5.0-497; +1 more |
| CVE-2015-6321 | – | Nov 6 | Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032,… Affected: 5.6.0-623; 6.0.0-000; 7.5.0-000; 7.5.0-825; 7.5.1-000; 7.5.2-000; +4 more |