Known vulnerabilities in Cisco AsyncOS for Secure Web Appliance

Software CPE: cpe:2.3:a:cisco_systems:cisco_asyncos_for_web_security_appliances:*:*:*:*:*:*:*:*
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco AsyncOS for Secure Web Appliance Cisco AsyncOS for Secure Web Appliance is affected by 25 known vulnerabilities: 1 high, 14 medium, 10 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126393 - Authentication Bypass by Primary Weakness
CVE-2026-20152
CWE-305 Medium
No
No
15.2.5-013 17.04.2026 SB2026041709
#VU122394 - Download of Code Without Integrity Check
CVE-2026-20056
CWE-494 Medium
No
No
15.2.5-011 05.02.2026 SB2026020566
#VU103670 - Execution with Unnecessary Privileges
CVE-2025-20185
CWE-250 Low
No
No
15.2.2-009 06.02.2025 SB2025020621
#VU103669 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20184
CWE-78 Low
No
No
15.2.2-009 06.02.2025 SB2025020620
#VU103666 - Improper input validation
CVE-2025-20183
CWE-20 Medium
No
No
15.0.1-004, 15.2.1-011 06.02.2025 SB2025020617
#VU100083 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20504
CWE-79 Low
No
No
15.0.1-004, 15.2.1-011 07.11.2024 SB2024110771
#VU94510 - Execution with Unnecessary Privileges
CVE-2024-20435
CWE-250 Low
No
No
15.2.0-164 18.07.2024 SB2024071802
#VU89581 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20256
CWE-79 Low
No
No
14.5.2-011, 15.0.0-355 16.05.2024 SB2024051613
#VU78898 - Improper Access Control
CVE-2023-20215
CWE-284 Medium
No
No
- 03.08.2023 SB2023080303
#VU77618 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20120
CWE-79 Low
No
No
15.0.0-332 22.06.2023 SB2023062221
#VU77616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20028
CWE-79 Low
No
No
15.0.0-332 22.06.2023 SB2023062221
#VU68969 - Incorrect Authorization
CVE-2022-20942
CWE-863 Medium
No
No
12.0.5-011, 12.5.4-005, 14.0.2-012 04.11.2022 SB2022110403
#VU68966 - Use of Hard-coded Cryptographic Key
CVE-2022-20868
CWE-321 Medium
No
No
14.2.0-217, 14.3.0-115 03.11.2022 SB2022110337
#VU67952 - Improper input validation
CVE-2022-20952
CWE-20 Medium
No
No
- 06.10.2022 SB2022100610
#VU66597 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20871
CWE-78 Medium
No
No
14.5.0-537 17.08.2022 SB2022081761
#VU57102 - Missing release of memory after effective lifetime
CVE-2021-34698
CWE-401 Medium
No
No
12.5.2-007, 14.0.1-014 07.10.2021 SB2021100701
#VU54607 - Missing XML Validation
CVE-2021-1359
CWE-112 Medium
No
No
12.0.3 005, 12.5.2 08.07.2021 SB2021070810
#VU54172 - Improper Certificate Validation
CVE-2021-1566
CWE-295 Medium
No
No
11.8.3 021, 12.0.3 005, 12.5.1 043 16.06.2021 SB2021061621
#VU52907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1490
CWE-79 Medium
No
No
14.0.0 06.05.2021 SB2021050613
#VU49906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1271
CWE-79 Low
No
No
12.5.1 20.01.2021 SB2021012115


Showing elements 1 - 20 out of 25