WS
Product
Web Security Virtual Appliance
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add Web Security Virtual Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-6751 | 7.5 | Jul 25 | A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy… Affected: 9.0.0; 10.0.0; 10.1.0; 10.1.1 |
| CVE-2017-6750 | 7.5 | Jul 25 | A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user… Affected: 10.0.0; 10.0_base; 10.1.0; 10.1.1; 10.1_base; 10.5.1; +1 more |
| CVE-2017-6748 | 6.7 | Jul 25 | A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to… Affected: 10.0.0; 10.0_base; 10.1.0; 10.1.1; 10.1_base; 10.5.1; +3 more |
| CVE-2017-6749 | 5.4 | Jul 25 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting… Affected: 10.0.0; 10.0_base; 10.1.0; 10.1.1; 10.1_base; 10.5.1; +1 more |
| CVE-2021-1271 | 4.8 | Jan 20 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored… Affected: before 12.5.1 |
| CVE-2015-6290 | – | Sep 14 | Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption from stale TCP connections) via crafted responses, aka Bug ID… Affected: 8.0.5; 8.0.6; 8.0.7; 8.0_base |
| CVE-2015-6287 | – | Sep 14 | Cisco Web Security Appliance (WSA) 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service (service outage) via a flood of TCP traffic that leads to DNS… Affected: 8.0.5; 8.0.6; 8.0_base |
| CVE-2015-4217 | – | Jun 26 | The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before… Affected: 7.7.5; 8.0.5; 8.5.0; 8.5.1; 8.6.0; 8.7.0 |
| CVE-2015-4216 | – | Jun 26 | The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before… Affected: 7.7.5; 8.0.5; 8.5.0; 8.5.1; 8.6.0; 8.7.0 |
| CVE-2014-2137 | – | Apr 2 | CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct… Affected: through 7.7; 7.1.0; 7.1.1; 7.1.2; 7.1.3; 7.1.4; +2 more |
Showing 10