Cisco

Web Security Appliance

54 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2016-1405

  • EPSS 2.84%
  • Veröffentlicht 08.06.2016 14:59:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remot...

7.8

CVE-2016-1381

  • EPSS 0.49%
  • Veröffentlicht 25.05.2016 01:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via an HTTP file-range request for cached content, aka Bug ID CSCuw97270.

7.8

CVE-2016-1380

  • EPSS 0.19%
  • Veröffentlicht 25.05.2016 01:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (proxy-process hang) via a crafted HTTP POST request, aka Bug ID CSCuo12171.

5.3

CVE-2016-1288

  • EPSS 0.45%
  • Veröffentlicht 03.03.2016 22:59:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (service outage) by leveraging certain intranet connectivity and sending a...

7.5

CVE-2016-1296

  • EPSS 0.37%
  • Veröffentlicht 20.01.2016 05:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848.

5

CVE-2015-6386

  • EPSS 0.44%
  • Veröffentlicht 01.12.2015 11:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service (CPU consumption) via FTP sessions in which the control connection is ended after dat...

9

CVE-2015-6298

  • EPSS 0.46%
  • Veröffentlicht 06.11.2015 11:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The admin web interface in Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote authenticated users to obtain root ...

7.8

CVE-2015-6292

  • EPSS 0.89%
  • Veröffentlicht 06.11.2015 11:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8.5.2-004, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote attackers to cause a denia...

7.8

CVE-2015-6321

  • EPSS 1%
  • Veröffentlicht 06.11.2015 03:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Man...

7.8

CVE-2015-6293

  • EPSS 0.89%
  • Veröffentlicht 06.11.2015 03:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) vi...