cisco ironport web security appliance - vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks

Cisco Ironport Web Security Appliance -

5.8

CVSSv2

Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks

Cisco Ironport Web Security Appliance

3.2

CVSSv2

Cisco IronPort Web Security Appliance AsyncOS software before 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks

Cisco Ironport Web Security Appliance

4

CVSSv2

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to access sensit...

Cisco Content Security Management Appliance -Cisco Email Security Appliance -Cisco Web Security Appliance -Cisco Ironport Web Security Appliance 13.6.2-023 Cisco Ironport Web Security Appliance 14.0.0-090 Cisco Ironport Web Security Appliance 14.0.0-133 Cisco Ironport Web Security Appliance 14.0.0-292 Cisco Ironport Web Security Appliance 14.0.0-300

4.3

CVSSv2

The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote malicious users to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630...

Cisco Email Security Appliance Firmware -Cisco Content Security Management Appliance -Cisco Web Security Appliance -

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote malicious users to hijack the authentication ...

Cisco Email Security Appliance Firmware -Cisco Content Security Management Appliance -Cisco Web Security Appliance -

9

CVSSv2

The admin web interface in Cisco AsyncOS 8.x prior to 8.0.8-113, 8.1.x and 8.5.x prior to 8.5.3-051, 8.6.x and 8.7.x prior to 8.7.0-171-LD, and 8.8.x prior to 8.8.0-085 on Web Security Appliance (WSA) devices allows remote authenticated users to obtain root privileges via crafted...

Cisco Web Security Appliance 8.5.0-497

7.8

CVSSv2

Cisco AsyncOS 8.x prior to 8.0.8-113, 8.1.x and 8.5.x prior to 8.5.3-051, 8.6.x and 8.7.x prior to 8.7.0-171-LD, and 8.8.x prior to 8.8.0-085 on Web Security Appliance (WSA) devices allows remote malicious users to cause a denial of service (memory consumption) via multiple file-...

Cisco Web Security Appliance 8.0.6 Cisco Web Security Appliance 8.5.0.000 Cisco Web Security Appliance 8.0.0-000 Cisco Web Security Appliance 8.0.8-mr-113 Cisco Web Security Appliance 8.0.7-142 Cisco Web Security Appliance 8.0.5 Cisco Web Security Appliance 8.5.2-024 Cisco Web Security Appliance 8.5.0-497 Cisco Web Security Appliance 8.0.6-078

7.8

CVSSv2

The proxy-cache implementation in Cisco AsyncOS 8.0.x prior to 8.0.7-151, 8.1.x and 8.5.x prior to 8.5.2-004, 8.6.x and 8.7.x prior to 8.7.0-171-LD, and 8.8.x prior to 8.8.0-085 on Web Security Appliance (WSA) devices allows remote malicious users to cause a denial of service (me...

Cisco Web Security Appliance 8.0.0-000 Cisco Web Security Appliance 8.0.5 Cisco Web Security Appliance 8.5.0.000 Cisco Web Security Appliance 8.5.0-497 Cisco Web Security Appliance 8.0.6-119 Cisco Web Security Appliance 8.0.6

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) devices allows remote malicious users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749.

Cisco Content Security Management Appliance -

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook