Known vulnerabilities in Cisco Web Security Appliance

Software CPE: cpe:2.3:a:cisco_systems:cisco_web_security_appliance:*:*:*:*:*:*:*:*
Total vulnerabilities: 27
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Web Security Appliance Cisco Web Security Appliance is affected by 27 known vulnerabilities: 10 medium, 17 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61942 - Uncaught Exception
CVE-2022-20675
CWE-248 Medium
No
No
14.0.2-012 06.04.2022 SB2022040627
#VU61941 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20781
CWE-79 Low
No
No
14.5 06.04.2022 SB2022040626
#VU61940 - Security Features
CVE-2022-20784
CWE-254 Medium
No
No
14.0.2 06.04.2022 SB2022040625
#VU55978 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34749
CWE-200 Medium
No
No
- 19.08.2021 SB2021081903
#VU52965 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1516
CWE-200 Low
No
No
14.0 07.05.2021 SB2021050710
#VU49908 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1129
CWE-200 Medium
No
No
12.5.1 20.01.2021 SB2021012116
#VU46249 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3547
CWE-200 Medium
No
No
- 03.09.2020 SB2020090308
#VU25788 - Improper input validation
CVE-2020-3164
CWE-20 Medium
No
No
- 05.03.2020 SB2020030511
#VU17427 - Permissions, Privileges, and Access Controls
CVE-2019-1672
CWE-264 Medium
No
No
- 07.02.2019 SB2019020708
#VU14427 - Permissions, Privileges, and Access Controls
CVE-2018-0428
CWE-264 Low
No
No
10.1.3 054, 10.5.2 072 15.08.2018 SB2018081607
#VU14428 - Resource exhaustion
CVE-2018-0410
CWE-400 Medium
No
No
10.1.3 054, 10.5.2 061, 11.5.0 614 15.08.2018 SB2018081607
SB2018081608
#VU14200 - Resource exhaustion
CVE-2018-5390
CWE-400 Medium
No
No
- 07.08.2018 SB2018080703
SB2018080704
SB2018080706
and 22 more
#VU14203 - Resource exhaustion
CVE-2018-6922
CWE-400 Medium
No
No
- 07.08.2018 SB2018080709
SB2018082812
SB2018110902
#VU14167 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0406
CWE-79 Low
No
No
10.5.1 296, 11.5.0 614 01.08.2018 SB2018080203
#VU13854 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0366
CWE-79 Low
No
No
10.5.1 296 11.07.2018 SB2018071304
#VU13232 - Improper input validation
CVE-2018-0353
CWE-20 Low
No
No
10.5.2 061, 11.5.0 614 06.06.2018 SB2018060723
#VU10896 - Improper Access Control
CVE-2018-0087
CWE-284 Low
No
No
- 09.03.2018 SB2018030911
#VU10097 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0093
CWE-79 Low
No
No
- 17.01.2018 SB2018011810
#VU9384 - Improper input validation
CVE-2017-12303
CWE-20 Low
No
No
- 21.11.2017 SB2017112112
#VU7983 - Exposure of sensitive information to an unauthorized actor
CVE-2017-6783
CWE-200 Low
No
No
- 16.08.2017 SB2017081712


Showing elements 1 - 20 out of 27