Cisco Cisco Secure Web Appliance
15 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-20152 | 11.8.0-453 ; 12.5.3-002 ; 12.0.3-007 ; … | Cisco Secure Web Appliance Authentication Service Traffic Bypass Vulnerability | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-20056 | 11.8.0-453 ; 12.5.3-002 ; 12.0.3-007 ; … | Cisco Secure Web Appliance TBD Bypass Vulnerability | MEDIUM 4.0 | 0.2 % | ||
| CVE-2025-20207 | 11.8.0-453 ; 12.5.3-002 ; 12.0.3-007 ; … | Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulne… | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20185 | 11.8.0-453 ; 12.5.3-002 ; 12.0.3-007 ; … | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20184 | 11.8.0-453 ; 12.5.3-002 ; 12.0.3-007 ; … | Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability | HIGH 7.2 | 0.9 % | ||
| CVE-2025-20183 | 11.8.0-453 ; 12.5.3-002 ; 12.0.3-007 ; … | Cisco Secure Web Appliance Range Request Bypass Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2022-20871 | 12.5.3-002 ; 14.1.0-032 ; 14.1.0-047 ; … | Cisco Secure Web Appliance Privilege Escalation Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-20504 | 14.1.0-032 ; 14.1.0-047 ; 14.1.0-041 ; … | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-20435 | 11.7.0-406 ; 11.7.0-418 ; 11.7.1-049 ; … | A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary comma | HIGH 8.8 | 0.2 % | ||
| CVE-2024-20256 | 11.7.0-406 ; 11.7.0-418 ; 11.7.1-049 ; … | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Applia | MEDIUM 4.8 | 0.3 % | ||
| CVE-2023-20215 | 11.7.0-406 ; 11.7.0-418 ; 11.7.1-049 ; … | A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote atta | MEDIUM 5.8 | 0.6 % | ||
| CVE-2022-20952 | 11.8.0-414 ; 11.8.1-023 ; 11.8.3-018 ; … | A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appli | MEDIUM 5.3 | 0.7 % | ||
| CVE-2023-20032 | 11.7.0-406 ; 11.7.0-418 ; 11.7.1-049 ; … | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file p | CRITICAL 9.8 | 30 % | ||
| CVE-2022-20942 | 11.7.0-406 ; 11.7.0-418 ; 11.7.1-049 ; … | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-20868 | 11.8.0-414 ; 11.8.1-023 ; 11.8.3-018 ; … | A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure | HIGH 8.8 | 0.8 % |