Cisco Web Security Appliance vulnerabilities
24 known vulnerabilities affecting cisco/cisco_web_security_appliance.
Total CVEs
24
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH9MEDIUM15
Vulnerabilities
Page 2 of 2
CVE-2019-1884MEDIUMCVSS 6.5≥ unspecified, < 10.5.5-0052019-07-04
CVE-2019-1884 [MEDIUM] CWE-20 CVE-2019-1884: A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appl
A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation mechanisms for certain fields in HTTP/HTTPS requests sent through an a
nvd
CVE-2019-1816HIGHCVSS 7.8≥ unspecified, < 10.1.4-017≥ unspecified, < 10.5.4-018+2 more2019-05-03
CVE-2019-1816 [HIGH] CWE-20 CVE-2019-1816: A vulnerability in the log subscription subsystem of the Cisco Web Security Appliance (WSA) could al
A vulnerability in the log subscription subsystem of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The vulnerability is due to insufficient validation of user-supplied input on the web and command-line interface. An attacker could exploit this vulnerability
nvd
CVE-2019-1817HIGHCVSS 7.5≥ unspecified, < 11.5.2-020≥ unspecified, < 11.7.0-4062019-05-03
CVE-2019-1817 [HIGH] CWE-20 CVE-2019-1817: A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appl
A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of HTTP and HTTPS requests. An attacker could exploit this vulnerability by sending a
nvd
CVE-2019-1672MEDIUMCVSS 5.8v10.1v10.52019-02-08
CVE-2019-1672 [MEDIUM] CWE-400 CVE-2019-1672: A vulnerability in the Decryption Policy Default Action functionality of the Cisco Web Security Appl
A vulnerability in the Decryption Policy Default Action functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured drop policy and allow traffic onto the network that should have been denied. The vulnerability is due to the incorrect handling of SSL-encrypted traffic when Decrypt for
nvd
← Previous2 / 2