Advisories · Technology

Cisco Web Security Appliance (WSA).

Every CVE that names Cisco Web Security Appliance (WSA) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-20120 CVE record

CVSS 5.4 Medium

Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities
- Cisco Web Security Appliance (WSA)
- Cross-site scripting (XSS)
Not analysed yet 28 Jun 2023
CVE-2023-20028 CVE record

CVSS 5.4 Medium

Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities
- Cisco Web Security Appliance (WSA)
- Cross-site scripting (XSS)
Not analysed yet 28 Jun 2023
CVE-2022-20675 CVE record

CVSS 5.3 Medium

Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-248
Not analysed yet 6 Apr 2022
CVE-2022-20781 CVE record

CVSS 5.4 Medium

Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability
- Cisco Web Security Appliance (WSA)
- Cross-site scripting (XSS)
Not analysed yet 6 Apr 2022
CVE-2022-20784 CVE record

CVSS 5.8 Medium

Cisco Web Security Appliance Filter Bypass Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-20
Not analysed yet 6 Apr 2022
CVE-2021-34698 CVE record

CVSS 8.6 High

Cisco Web Security Appliance Proxy Service Denial of Service Vulnerability
- Cisco Web Security Appliance (WSA)
- Denial of service
Not analysed yet 6 Oct 2021
CVE-2021-34749 CVE record

CVSS 5.8 Medium

Multiple Cisco Products Server Name Identification Data Exfiltration Vulnerability
- Cisco Web Security Appliance (WSA)
- Information disclosure
Not analysed yet 18 Aug 2021
CVE-2021-1359 CVE record

CVSS 6.3 Medium

Cisco Web Security Appliance Privilege Escalation Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-112
Not analysed yet 8 Jul 2021
CVE-2021-1566 CVE record

CVSS 7.4 High

Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-296
Not analysed yet 16 Jun 2021
CVE-2021-1516 CVE record

CVSS 4.3 Medium

Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-540
Not analysed yet 6 May 2021
CVE-2021-1490 CVE record

CVSS 4.7 Medium

Cisco Web Security Appliance Cross-Site Scripting Vulnerability
- Cisco Web Security Appliance (WSA)
- Cross-site scripting (XSS)
Not analysed yet 6 May 2021
CVE-2021-1271 CVE record

CVSS 4.8 Medium

Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability
- Cisco Web Security Appliance (WSA)
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2021
CVE-2021-1129 CVE record

CVSS 5.3 Medium

Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability
- Cisco Web Security Appliance (WSA)
- Information disclosure
Not analysed yet 20 Jan 2021
CVE-2020-3367 CVE record

CVSS 5.3 Medium

Cisco Secure Web Appliance Privilege Escalation Vulnerability
- Cisco Web Security Appliance (WSA)
- Command injection
Not analysed yet 18 Nov 2020
CVE-2019-15969 CVE record

CVSS 6.1 Medium

Cisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability
- Cisco Web Security Appliance (WSA)
- Cross-site scripting (XSS)
Not analysed yet 23 Sept 2020
CVE-2020-3117 CVE record

CVSS 4.7 Medium

Cisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header Injection Vulnerability
- Cisco Web Security Appliance (WSA)
- Other injection
Not analysed yet 23 Sept 2020
CVE-2020-3547 CVE record

CVSS 4.3 Medium

Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability
- Cisco Web Security Appliance (WSA)
- Information disclosure
Not analysed yet 4 Sept 2020
CVE-2020-3164 CVE record

CVSS 5.3 Medium

Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-20
Not analysed yet 4 Mar 2020
CVE-2019-15956 CVE record

CVSS 8.8 High

Cisco Web Security Appliance Unauthorized Device Reset Vulnerability
- Cisco Web Security Appliance (WSA)
- Broken access control
Not analysed yet 26 Nov 2019
CVE-2019-1884 CVE record

CVSS 7.7 High

Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-20
Not analysed yet 4 Jul 2019
CVE-2019-1886 CVE record

CVSS 8.6 High

Cisco Web Security Appliance HTTPS Certificate Denial of Service Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-20
Not analysed yet 4 Jul 2019
CVE-2019-1817 CVE record

CVSS 8.6 High

Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-20
Not analysed yet 3 May 2019
CVE-2019-1816 CVE record

CVSS 5.3 Medium

Cisco Web Security Appliance Privilege Escalation Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-20
Not analysed yet 3 May 2019
CVE-2019-1672 CVE record

CVSS 5.8 Medium

Cisco Web Security Appliance Decryption Policy Bypass Vulnerability
- Cisco Web Security Appliance (WSA)
- Denial of service
Not analysed yet 8 Feb 2019
CVE-2016-6469 CVE record

Cisco Web Security Appliance (WSA): A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance…
- Cisco Web Security Appliance (WSA)
Not analysed yet 14 Dec 2016