WS
Product
Web Security Appliance
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 20Medium 25Low 0
Watch
Add Web Security Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1359 | 8.8 | Jul 8 | A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection… Affected: 11.8.0-429; 11.8.0-453 |
| CVE-2019-15956 | 8.8 | Nov 26 | A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an… Affected: 10.5.2-072; 11.5.1-fcs-125; 11.7.0-fcs-418 |
| CVE-2019-1886 | 8.6 | Jul 4 | A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition Affected: 10.5.2-072; 10.5.3-025; 11.7.0-fcs-334 |
| CVE-2018-0410 | 8.6 | Aug 15 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to exhaust system memory… Affected: 9.1.1-074; 9.1.2-010; 9.1.2-022; 9.1.2-039; 10.1.0-204; 10.1.1-235; +4 more |
| CVE-2019-1816 | 7.8 | May 3 | A vulnerability in the log subscription subsystem of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate… Affected: 10.5.2-072; 11.0.0-641; 11.5.0-fcs-614; wsa10.5.0-fcs-000 |
| CVE-2019-1817 | 7.5 | May 3 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an unauthenticated, remote attacker to cause a denial of… Affected: 11.5.1-fcs-115; 11.5.1-fcs-124; 11.5.1-fcs-125; 11.7.0-fcs-334 |
| CVE-2018-0353 | 7.5 | Jun 7 | A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor (L4TM)… Affected: 10.5.1; 10.5.1-296; 10.5.2; 11.0.0; 11.5.0-fcs-442 |
| CVE-2017-6751 | 7.5 | Jul 25 | A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy… Affected: 9.0.0-162; 9.0.0-193; 9.0.0-485; 10.0.0-232; 10.0.0-233; 10.1.0-204 |
| CVE-2017-6750 | 7.5 | Jul 25 | A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user… Affected: 10.0.0-232; 10.0.0-233; 10.0_base; 10.1.0; 10.1.0-204; 10.1.1-230; +4 more |
| CVE-2016-9212 | 7.5 | Dec 14 | A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote… Affected: 9.0.1-162; 9.1.1-074 |
| CVE-2016-6469 | 7.5 | Dec 14 | A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 9.0.1-162; 9.1.1-074 |
| CVE-2016-6372 | 7.5 | Oct 28 | A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security… Affected: 5.6.0-623; 6.0.0-000; 7.1.0; 7.1.1; 7.1.2; 7.1.3; +34 more |
| CVE-2016-6360 | 7.5 | Oct 28 | A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to… Affected: 8.8.0-085; 9.0.0-193; 9.0_base; 9.1.0-000; 9.1.0-070; 9.1_base; +4 more |
| CVE-2016-6407 | 7.5 | Sep 17 | Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for… Affected: 5.6.0-623; 6.0.0-000; 7.1.0; 7.1.1; 7.1.2; 7.1.3; +34 more |
| CVE-2016-1405 | 7.5 | Jun 8 | libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance… Affected: 8.8.0-085; 9.1.0-070; 9.5.0-284 |
| CVE-2016-1381 | 7.5 | May 25 | Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via… Affected: 8.5.0-497; 8.5.0.000; 8.5.1-021; 8.5.2-024; 8.5.2-027; 8.5.3-055; +4 more |
| CVE-2016-1380 | 7.5 | May 25 | Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (proxy-process hang) via a crafted HTTP POST… Affected: 8.0.0-000; 8.0.5; 8.0.6; 8.0.6-078; 8.0.6-119; 8.0.7; +8 more |
| CVE-2016-1296 | 7.5 | Jan 20 | The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via… Affected: 8.5.3-055; 9.1.0-000; 9.5.0-235 |
| CVE-2021-1566 | 7.4 | Jun 16 | A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance… Affected: All versions, or not specified |
| CVE-2017-6746 | 7.2 | Jul 25 | A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to… Affected: 10.0.0-233; 10.0_base; 10.1.0; 10.1.0-204; 10.1.1-230; 10.1.1-234; +5 more |
Showing 20