Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco web security appliance - vulnerabilities and exploits

(subscribe to this query)
5.3
CVSSv3
CVE-2016-1440
The proxy process on Cisco Web Security Appliance (WSA) devices up to and including 9.1.0-070 allows remote malicious users to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, ...
Cisco Web Security Appliance 8.8.0-000Cisco Web Security Appliance 9.1.0-070Cisco Web Security Appliance 6.0.0-000Cisco Web Security Appliance 5.6.0-623Cisco Web Security Appliance 8.0.6-119Cisco Web Security Appliance 9.0.0-193Cisco Web Security Appliance 9.0 BaseCisco Web Security Appliance 7.5.1-000Cisco Web Security Appliance 7.1.4Cisco Web Security Appliance 9.1.0-000Cisco Web Security Appliance 8.5.3-055Cisco Web Security Appliance 8.5.2-024Cisco Web Security Appliance 8.0.7-142Cisco Web Security Appliance 8.5.0-497Cisco Web Security Appliance 8.5.0.000Cisco Web Security Appliance 7.1.3Cisco Web Security Appliance 7.1.2Cisco Web Security Appliance 7.7.5-835Cisco Web Security Appliance 7.7.0-608Cisco Web Security Appliance 8.5.1-021Cisco Web Security Appliance 7.7.1-000Cisco Web Security Appliance 8.0.8-mr-113
7.5
CVSSv3
CVE-2016-6407
Cisco AsyncOS up to and including 9.5.0-444 on Web Security Appliance (WSA) devices allows remote malicious users to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.
Cisco Web Security Appliance 7.7.0-000Cisco Web Security Appliance 7.1.1Cisco Web Security Appliance 8.5.0.000Cisco Web Security Appliance 8.5.0-497Cisco Web Security Appliance 8.0.7-142Cisco Web Security Appliance 8.5.2-024Cisco Web Security Appliance 8.5.1-021Cisco Web Security Appliance 8.5.3-055Cisco Web Security Appliance 8.8.0-085Cisco Web Security Appliance 7.5.2-hp2-303Cisco Web Security Appliance 7.1.4Cisco Web Security Appliance 7.5.1-000Cisco Web Security Appliance 8.0.0-000Cisco Web Security Appliance 8.5.2-027Cisco Web Security Appliance 8.0.7Cisco Web Security Appliance 6.0.0-000Cisco Web Security Appliance 7.5.0-825Cisco Web Security Appliance 9.1.0-000Cisco Web Security Appliance 9.1.0-070Cisco Web Security Appliance 9.5.0-444Cisco Web Security Appliance 7.1.2Cisco Web Security Appliance 7.1.3
7.5
CVSSv3
CVE-2016-6372
A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious use...
Cisco Web Security Appliance 9.1.0-000Cisco Email Security Appliance 9.9 BaseCisco Email Security Appliance 8.9.1-000Cisco Web Security Appliance 7.1.0Cisco Email Security Appliance 9.6.0-051Cisco Email Security Appliance 9.7.1-066Cisco Web Security Appliance 8.5.2-024Cisco Web Security Appliance 9.5.0-235Cisco Email Security Appliance 9.0.0Cisco Email Security Appliance 8.5.7-042Cisco Email Security Appliance 8.5.0-000Cisco Web Security Appliance 8.0.5 Hot Patch 1Cisco Email Security Appliance 8.0 BaseCisco Web Security Appliance 7.1.2Cisco Email Security Appliance 9.1.0-032Cisco Web Security Appliance 8.5.2-027Cisco Web Security Appliance 7.1.1Cisco Web Security Appliance 8.8.0-085Cisco Web Security Appliance 8.0.7-142Cisco Email Security Appliance 8.9.0Cisco Email Security Appliance 9.7.0-125Cisco Email Security Appliance 8.5.6-074
7.5
CVSSv3
CVE-2016-6360
A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious user to cause a partial denial of service (DoS) condition due to the AMP process unexpectedly restarti...
Cisco Web Security Appliance 9.1.0-070Cisco Email Security Appliance 9.6.0-051Cisco Web Security Appliance 9.0.0-193Cisco Web Security Appliance 9.5.0-444Cisco Web Security Appliance 9.5 BaseCisco Web Security Appliance 8.8.0-085Cisco Email Security Appliance 9.6.0-000Cisco Web Security Appliance 9.1 BaseCisco Web Security Appliance 9.5.0-235Cisco Web Security Appliance 9.5.0-284Cisco Email Security Appliance 9.6.0-042Cisco Web Security Appliance 9.0 BaseCisco Email Security Appliance 9.5.0-201Cisco Web Security Appliance 9.1.0-000Cisco Email Security Appliance 9.5.0-000Cisco Email Security Appliance 9.7.0-125
6.7
CVSSv3
CVE-2017-6748
A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local malicious user to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials....
Cisco Web Security Appliance 10.0 BaseCisco Web Security Virtual Appliance 10.0 BaseCisco Web Security Virtual Appliance 10.1.0Cisco Web Security Virtual Appliance 11.0.0Cisco Web Security Virtual Appliance 11.0 BaseCisco Web Security Appliance 10.0.0-233Cisco Web Security Virtual Appliance 10.0.0Cisco Web Security Appliance 10.1.0Cisco Web Security Virtual Appliance 10.5 BaseCisco Web Security Virtual Appliance 10.1.1Cisco Web Security Virtual Appliance 10.5.1Cisco Web Security Appliance 10.0.0-232Cisco Web Security Virtual Appliance 10.1 BaseCisco Web Security Appliance 11.0.0-613Cisco Web Security Appliance 10.1.1-230Cisco Web Security Appliance 11.0.0Cisco Web Security Appliance 10.5.0Cisco Web Security Appliance 10.5.0-358Cisco Web Security Appliance 10.1.0-204
7.5
CVSSv3
CVE-2017-6750
A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local malicious user to log in to the device with the privileges of a limited user or an unauthenticated, remote malicious user to authenticate to certain areas of the web GUI, a...
Cisco Web Security Appliance 10.1.1-235Cisco Web Security Appliance 10.5.0-358Cisco Web Security Appliance 10.1.0-204Cisco Web Security Appliance 10.1.1-234Cisco Web Security Appliance 10.0.0-233Cisco Web Security Appliance 10.1.1-230Cisco Web Security Appliance 10.0.0-232Cisco Web Security Virtual Appliance 10.0.0Cisco Web Security Appliance 10.1.0Cisco Web Security Virtual Appliance 10.0 BaseCisco Web Security Virtual Appliance 10.5.1Cisco Web Security Virtual Appliance 10.5 BaseCisco Web Security Appliance 10.5.0Cisco Web Security Appliance 10.0 BaseCisco Web Security Virtual Appliance 10.1.0Cisco Web Security Virtual Appliance 10.1.1Cisco Web Security Virtual Appliance 10.1 Base
5.4
CVSSv3
CVE-2017-6749
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affect...
Cisco Web Security Virtual Appliance 10.0 BaseCisco Web Security Virtual Appliance 10.1.0Cisco Web Security Virtual Appliance 10.5.1Cisco Web Security Appliance 10.1.1-230Cisco Web Security Appliance 10.5.0Cisco Web Security Appliance 10.5.1-270Cisco Web Security Virtual Appliance 10.1 BaseCisco Web Security Appliance 10.5.0-358Cisco Web Security Appliance 10.1.1-235Cisco Web Security Virtual Appliance 10.0.0Cisco Web Security Virtual Appliance 10.5 BaseCisco Web Security Appliance 10.1.1-234Cisco Web Security Appliance 10.0 BaseCisco Web Security Appliance 10.0.0-232Cisco Web Security Appliance 10.1.0Cisco Web Security Virtual Appliance 10.1.1Cisco Web Security Appliance 10.1.0-204Cisco Web Security Appliance 10.0.0-233
5.9
CVSSv3
CVE-2016-6416
The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 up to and including 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 up to and including 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote malicious users ...
Cisco Content Security Management Appliance 9.1.0-033Cisco Email Security Appliance 9.9 BaseCisco Web Security Appliance 9.5.0-235Cisco Web Security Appliance 9.5.0-284Cisco Email Security Appliance 9.6.0-051Cisco Email Security Appliance 9.7.1-066Cisco Content Security Management Appliance 9.1.0-031Cisco Email Security Appliance 9.9.6-026Cisco Content Security Management Appliance 9.1.0-103Cisco Content Security Management Appliance 9.6.0Cisco Web Security Appliance 9.5 BaseCisco Content Security Management Appliance 9.1.0-004Cisco Content Security Management Appliance 9.1.0Cisco Web Security Appliance 9.5.0-444Cisco Web Security Appliance 9.1.0-000Cisco Web Security Appliance 9.1.0-070Cisco Web Security Appliance 9.0.0-162Cisco Content Security Management Appliance 9.5.0Cisco Email Security Appliance 9.6.0-000Cisco Web Security Appliance 9.1 BaseCisco Email Security Appliance 9.6.0-042
7.5
CVSSv3
CVE-2017-6751
A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote malicious user to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, a...
Cisco Web Security Appliance 9.0.0-162Cisco Web Security Appliance 9.0.0-193Cisco Web Security Appliance 9.0.0-485Cisco Web Security Appliance 10.0.0-232Cisco Web Security Appliance 10.0.0-233Cisco Web Security Appliance 10.1.0-204Cisco Web Security Virtual Appliance 9.0.0Cisco Web Security Virtual Appliance 10.0.0Cisco Web Security Virtual Appliance 10.1.0Cisco Web Security Virtual Appliance 10.1.1
NA
CVE-2014-2137
CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and previous versions allows remote malicious users to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002.
Cisco Web Security Virtual Appliance 7.1.0Cisco Web Security Virtual Appliance 7.1.2Cisco Web Security Virtual Appliance 7.1.4Cisco Web Security Virtual Appliance 7.5.0Cisco Web Security Virtual Appliance 7.1.1Cisco Web Security Virtual ApplianceCisco Web Security Appliance -Cisco Web Security Virtual Appliance 7.5.1Cisco Web Security Virtual Appliance 7.1.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook