Cisco Web Security Appliance
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0087 | Cisco Web Security Appliance | A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to the | MEDIUM 5.6 | 1.8 % | ||
| CVE-2018-0093 | Cisco Web Security Appliance | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker | MEDIUM 6.1 | 1.2 % | ||
| CVE-2017-12303 | Cisco Web Security Appliance | A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance ( | MEDIUM 5.3 | 1.6 % | ||
| CVE-2017-6751 | Cisco Web Security Appliance | A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to | HIGH 7.5 | 2.0 % | ||
| CVE-2017-6750 | Cisco Web Security Appliance | A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device | HIGH 7.5 | 2.7 % | ||
| CVE-2017-6749 | Cisco Web Security Appliance | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to | MEDIUM 5.4 | 1.2 % | ||
| CVE-2017-6748 | Cisco Web Security Appliance | A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command | MEDIUM 6.7 | 0.8 % | ||
| CVE-2017-6746 | Cisco Web Security Appliance | A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform comm | HIGH 7.2 | 4.4 % | ||
| CVE-2017-3870 | Cisco Web Security Appliance | A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated | MEDIUM 5.8 | 1.5 % | ||
| CVE-2016-9212 | Cisco Web Security Appliance | A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco Web Security Appliances | HIGH 7.5 | 2.8 % |