Cisco Secure Web Appliance vulnerabilities
5 known vulnerabilities in Cisco Secure Web Appliance from Cisco. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Cisco Secure Email: Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected device. The att
- 8.8 High severity
Cisco Secure Web Appliance: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an authenticated, remote attacker to perform a command injection and elevate privilege
- 7.8 High severity
Cisco Secure Web Appliance: Execution with Unnecessary Privileges
A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the
- 9.8 Critical severity
Cisco Secure Web Appliance: Out-of-bounds Write
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remo
- 8.8 High severity
Cisco Secure Web Appliance: Use of Hard-coded Credentials
A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker to elevate privileges on an affected system. The attacker n