WS
Product
Web Security Appliance
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 20Medium 25Low 0
Watch
Add Web Security Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0428 | 6.7 | Aug 15 | A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root Affected: 11.0.0-fcs-250; 11.5.0-fcs-000; wsa10.0.0-959; wsa10.5.0-fcs-000 |
| CVE-2017-6748 | 6.7 | Jul 25 | A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to… Affected: 10.0.0-232; 10.0.0-233; 10.0_base; 10.1.0; 10.1.0-204; 10.1.1-230; +4 more |
| CVE-2021-1516 | 6.5 | May 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and… Affected: All versions, or not specified |
| CVE-2019-1884 | 6.5 | Jul 4 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of… Affected: 10.1.4-017; 10.5.2-072; 11.5.1-fcs-125; 11.7.0-256 |
| CVE-2023-20120 | 6.1 | Jun 28 | Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email… Affected: 14.0.0-418; 14.0.1-033; 14.0.1-053; 15.0.0-050; 15.0.0-256 |
| CVE-2023-20119 | 6.1 | Jun 28 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance… Affected: 14.0.0-418; 14.0.1-033; 14.0.1-053; 15.0.0-050; 15.0.0-256 |
| CVE-2021-1490 | 6.1 | May 6 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a… Affected: before 14.0 |
| CVE-2019-15969 | 6.1 | Sep 23 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS)… Affected: before 11.8.0 |
| CVE-2018-0406 | 6.1 | Aug 1 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected or Document… Affected: 10.1.2-003; 10.5.1-269; 11.5.0-fcs-581 |
| CVE-2018-0366 | 6.1 | Jul 16 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: 10.1.2-003; 10.5.1-276 |
| CVE-2018-0093 | 6.1 | Jan 18 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: All versions, or not specified |
| CVE-2016-1411 | 5.9 | Dec 14 | A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management… Affected: 7.7.0-608; 7.7.5-835; 8.8.0-000 |
| CVE-2016-6416 | 5.9 | Oct 5 | The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and… Affected: 9.0.0-162; 9.1.0-000; 9.1.0-070; 9.1_base; 9.5.0-235; 9.5.0-284; +2 more |
| CVE-2019-1672 | 5.8 | Feb 8 | Cisco Web Security Appliance Decryption Policy Bypass Vulnerability Affected: 10.1.0-204; 10.5.2-072; 11.5.1-fcs-115 |
| CVE-2017-3870 | 5.8 | Mar 17 | A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a… Affected: 8.5.3-069; 9.1.1-074; 9.1.2-010 |
| CVE-2017-3827 | 5.8 | Feb 22 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA)… Affected: 10.0.0-082; 10.0.0-124; 10.0.0-125; 10.0.0-203; 10.0.0-232 |
| CVE-2023-20028 | 5.4 | Jun 28 | Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email… Affected: 14.0.0-418; 14.0.1-033; 14.0.1-053; 15.0.0-050; 15.0.0-256 |
| CVE-2017-6749 | 5.4 | Jul 25 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting… Affected: 10.0.0-232; 10.0.0-233; 10.0_base; 10.1.0; 10.1.0-204; 10.1.1-230; +5 more |
| CVE-2022-20784 | 5.3 | Apr 6 | A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to… Affected: 11.7.0 before 14.0.2 |
| CVE-2021-1129 | 5.3 | Jan 20 | A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and… Affected: 11.8.0 |
| CVE-2020-3164 | 5.3 | Mar 4 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security… Affected: through 12.0.1-268 |
| CVE-2016-1440 | 5.3 | Jul 2 | The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP… Affected: 5.6.0-623; 6.0.0-000; 7.1.0; 7.1.1; 7.1.2; 7.1.3; +31 more |
| CVE-2016-1288 | 5.3 | Mar 3 | The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service… Affected: 9.0.0-193 |
| CVE-2020-3117 | 4.7 | Sep 23 | A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated,… Affected: 11.8.0-382; 12.0.1-268 |
| CVE-2017-6783 | 4.3 | Aug 17 | A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) could allow an… Affected: 10.0.0-230 |
Showing 25