WS
Product
Web Security Appliance
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 20Medium 25Low 0
Watch
Add Web Security Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-6293 | – | Nov 6 | Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices… Affected: 8.0.0-000; 8.0.5; 8.0.5; 8.0.6; 8.0.6-078; 8.0.7-142; +4 more |
| CVE-2015-4288 | – | Jul 29 | The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048… Affected: 8.5.0-000 |
| CVE-2015-0732 | – | Jul 29 | Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and… Affected: 9.0.0-193 |
| CVE-2015-4198 | – | Jun 20 | Cross-site scripting (XSS) vulnerability in the web framework on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allows remote attackers to inject arbitrary web… Affected: 8.5.0-497 |
| CVE-2015-0738 | – | May 17 | Cross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security Appliance (WSA) devices 8.5.0-497 allows remote attackers to inject arbitrary web… Affected: 8.5.0-497 |
| CVE-2015-0698 | – | Apr 15 | Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allow remote… Affected: through 8.5.0-497 |
| CVE-2015-0693 | – | Apr 15 | Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows… Affected: 8.5_base |
| CVE-2015-0692 | – | Apr 11 | Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows… Affected: 8.5_base |
| CVE-2015-0624 | – | Feb 21 | The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers… Affected: All versions, or not specified |
| CVE-2015-0628 | – | Feb 20 | The proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass intended proxying restrictions via a malformed HTTP method, aka Bug ID CSCus79174 Affected: All versions, or not specified |
| CVE-2015-0623 | – | Feb 19 | Cross-site scripting (XSS) vulnerability in the Administrator report page on Cisco Web Security Appliance (WSA) devices allows remote attackers to inject arbitrary web script or… Affected: All versions, or not specified |
| CVE-2014-3289 | – | Jun 10 | Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch… Affected: All versions, or not specified |
| CVE-2014-2137 | – | Apr 2 | CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct… Affected: All versions, or not specified |
| CVE-2013-5537 | – | Oct 24 | The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state… Affected: All versions, or not specified |
| CVE-2013-3395 | – | Jul 2 | Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content… Affected: All versions, or not specified |