Known vulnerabilities in Cisco Content Security Management Appliance

Known vulnerabilities in Cisco Content Security Management Appliance

Vendor: Cisco Systems, Inc

Software: Cisco Content Security Management Appliance

Software CPE: cpe:2.3:a:cisco_systems:cisco_content_security_management_appliance:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 13

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU51220 - Exposure of sensitive information to an unauthorized actor CVE-2021-1425	CWE-200	Low	No	No	13.8.0	03.03.2021	SB2021030316
#VU49908 - Exposure of sensitive information to an unauthorized actor CVE-2021-1129	CWE-200	Medium	No	No	13.8.0	20.01.2021	SB2021012116
#VU46249 - Exposure of sensitive information to an unauthorized actor CVE-2020-3547	CWE-200	Medium	No	No	-	03.09.2020	SB2020090308
#VU27685 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2020-3178	CWE-601	Medium	No	No	13.6.0	11.05.2020	SB2020030511
#VU25788 - Improper input validation CVE-2020-3164	CWE-20	Medium	No	No	13.6.0	05.03.2020	SB2020030511
#VU25484 - Improper input validation CVE-2019-1983	CWE-20	Medium	No	No	11.0.1 161, 12.5.0 633	20.02.2020	SB2020022013
#VU24673 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2020-3117	CWE-113	Medium	No	No	13.0.0 187	27.01.2020	SB2020012711
#VU20871 - Improper Authorization CVE-2019-12635	CWE-285	Low	No	No	12.5.0 633	05.09.2019	SB2019090508
#VU15763 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-15393	CWE-79	Low	No	No	-	07.11.2018	SB2018110810
#VU10421 - Permissions, Privileges, and Access Controls CVE-2018-0140	CWE-264	Low	No	No	-	08.02.2018	SB2018020813 SB2018020814
#VU10121 - Permissions, Privileges, and Access Controls CVE-2018-0095	CWE-264	Low	No	No	-	22.01.2018	SB2018011912
#VU7983 - Exposure of sensitive information to an unauthorized actor CVE-2017-6783	CWE-200	Low	No	No	-	16.08.2017	SB2017081712
#VU7000 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-6661	CWE-79	Low	No	No	-	09.06.2017	SB2017060902 SB2017060903