Cisco

Secure Web Appliance

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-20207

  • EPSS 0.07%
  • Veröffentlicht 05.02.2025 17:15:26
  • Zuletzt bearbeitet 05.02.2025 17:15:26

A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, remote attacker to obtain confidential information a...

5.3

CVE-2025-20183

  • EPSS 0.11%
  • Veröffentlicht 05.02.2025 17:15:25
  • Zuletzt bearbeitet 05.08.2025 19:28:30

A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a mal...

7.2

CVE-2025-20184

  • EPSS 0.16%
  • Veröffentlicht 05.02.2025 17:15:25
  • Zuletzt bearbeitet 08.08.2025 17:11:23

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected devic...

6.7

CVE-2025-20185

  • EPSS 0.02%
  • Veröffentlicht 05.02.2025 17:15:25
  • Zuletzt bearbeitet 06.08.2025 16:53:52

A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, local attacker to elev...

8.8

CVE-2022-20871

  • EPSS 0.41%
  • Veröffentlicht 15.11.2024 16:15:23
  • Zuletzt bearbeitet 11.08.2025 17:44:07

A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an authenticated, remote attacker to perform a command injection and elevate...

5.4

CVE-2024-20504

  • EPSS 0.08%
  • Veröffentlicht 06.11.2024 17:15:16
  • Zuletzt bearbeitet 07.08.2025 19:08:29

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow an authenticated, remote attacker to conduct a stored cross-site script...

7.8

CVE-2024-20435

  • EPSS 0.13%
  • Veröffentlicht 17.07.2024 17:15:14
  • Zuletzt bearbeitet 08.08.2025 01:55:41

A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied i...

4.8

CVE-2024-20256

  • EPSS 0.13%
  • Veröffentlicht 15.05.2024 18:15:08
  • Zuletzt bearbeitet 07.08.2025 17:10:32

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. ...