Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco web security appliance 11.8.0 vulnerabilities and exploits

(subscribe to this query)
9
CVSSv2
CVE-2021-1359
A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to perform command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-su...
Cisco Web Security Appliance 11.8.0-429Cisco Web Security Appliance 11.8.0-453Cisco Asyncos
4.3
CVSSv2
CVE-2020-3117
A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote malicious user to inject crafted HTTP headers in the web server's response. The vulnerabi...
Cisco Content Security Management ApplianceCisco Web Security Appliance 11.8.0-382Cisco Web Security Appliance 12.0.1-268
4.3
CVSSv2
CVE-2019-15969
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote malicious user to conduct cross-site scripting (XSS) attacks against a user of the interface of an affected device. The vulnerability is due to insuf...
Cisco Web Security Appliance
5
CVSSv2
CVE-2021-1129
A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote malicious user to access gen...
Cisco Content Security Management Appliance 12.5.0Cisco Web Security Appliance 11.8.0Cisco Email Security Appliance 13.0.0
NA
CVE-2023-20215
A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote malicious user to bypass a configured rule, allowing traffic onto a network that should have been blocked. This vulnerability is due to improper...
Cisco Asyncos 11.7.0-406Cisco Asyncos 11.7.0-418Cisco Asyncos 11.7.1-006Cisco Asyncos 11.7.1-020Cisco Asyncos 11.7.1-049Cisco Asyncos 11.7.2-011Cisco Asyncos 11.8.0-414Cisco Asyncos 11.8.1-023Cisco Asyncos 11.8.3-018Cisco Asyncos 11.8.3-021Cisco Asyncos 12.0.1-268Cisco Asyncos 12.0.3-007Cisco Asyncos 12.5.1-011Cisco Asyncos 12.5.2-007Cisco Asyncos 12.5.4-005Cisco Asyncos 12.5.5-004Cisco Asyncos 14.0.2-012Cisco Asyncos 14.0.3-014Cisco Asyncos 14.0.4-005Cisco Asyncos 14.5.0-498Cisco Asyncos 14.5.1-008Cisco Asyncos 14.5.1-016
5
CVSSv2
CVE-2016-2180
The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL up to and including 1.0.2h allows remote malicious users to cause a denial of service (out-of-bounds read and application crash) via a cr...
Openssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.2eOpenssl Openssl 1.0.1rOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.2gOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.2hOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.1tOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.1pOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1nOpenssl Openssl 1.0.1qOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1l
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook