Web Security Virtual Appliance
Vendor:
First CVE: Apr 2, 2014 · Active for 12 years
10
Total CVEs
More Total CVEs than 88% of tracked products
2.5
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
5.5
Avg CVSS
Higher Avg CVSS than 14% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Web Security Virtual Appliance over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 2, 2014
12 years ago
Most Recent CVE
Jan 20, 2021
2,011 days ago
CVE Severity & Scoring
Web Security Virtual Appliance10 CVEs
80%
20%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local1 (10.0%)
Network4 (40.0%)
Unknown5 (50.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (50.0%)
High0 (0.0%)
Unknown5 (50.0%)
User Interaction
None3 (30.0%)
Unknown5 (50.0%)
Required2 (20.0%)
Privileges Required
Low1 (10.0%)
High2 (20.0%)
None2 (20.0%)
Unknown5 (50.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-6750HIGH A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user o | Jul 25, 2017 | 7.5 | 24 | NO | NO |
CVE-2017-6748MEDIUM A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root | Jul 25, 2017 | 6.7 | 22 | NO | NO |
CVE-2017-6751HIGH A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy inter | Jul 25, 2017 | 7.5 | 20 | NO | NO |
CVE-2021-1271MEDIUM A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cros | Jan 20, 2021 | 4.8 | 19 | NO | NO |
CVE-2017-6749MEDIUM A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting ( | Jul 25, 2017 | 5.4 | 19 | NO | NO |
CVE-2015-6290MEDIUM Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption from stale TCP connections) via crafted responses, aka Bug ID C | Sep 14, 2015 | 4.3 | 19 | NO | NO |
CVE-2015-4216MEDIUM The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before | Jun 26, 2015 | 5.0 | 17 | NO | NO |
CVE-2015-6287MEDIUM Cisco Web Security Appliance (WSA) 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service (service outage) via a flood of TCP traffic that leads to DNS resolu | Sep 14, 2015 | 5.0 | 15 | NO | NO |
CVE-2015-4217MEDIUM The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before | Jun 26, 2015 | 4.3 | 14 | NO | NO |
CVE-2014-2137MEDIUM CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirec | Apr 2, 2014 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Web Security Virtual Appliance
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.0.0 | 1 | 7.5 | 2.0% | 0 | 0 |
| 8.7.0 | 2 | 4.7 | 2.8% | 0 | 0 |
| 8.6.0 | 2 | 4.7 | 2.8% | 0 | 0 |
| 8.5.1 | 2 | 4.7 | 2.8% | 0 | 0 |
| 8.5.0 | 2 | 4.7 | 2.8% | 0 | 0 |
| 8.0_base | 2 | 4.7 | 1.7% | 0 | 0 |
| 8.0.7 | 1 | 4.3 | 1.4% | 0 | 0 |
| 8.0.6 | 2 | 4.7 | 1.7% | 0 | 0 |
| 8.0.5 | 4 | 4.7 | 2.3% | 0 | 0 |
| 7.7.5 | 2 | 4.7 | 2.8% | 0 | 0 |
| 7.5.1 | 1 | 4.3 | 0.9% | 0 | 0 |
| 7.5.0 | 1 | 4.3 | 0.9% | 0 | 0 |
| 7.1.4 | 1 | 4.3 | 0.9% | 0 | 0 |
| 7.1.3 | 1 | 4.3 | 0.9% | 0 | 0 |
| 7.1.2 | 1 | 4.3 | 0.9% | 0 | 0 |
| 7.1.1 | 1 | 4.3 | 0.9% | 0 | 0 |
| 7.1.0 | 1 | 4.3 | 0.9% | 0 | 0 |
| 11.0_base | 1 | 6.7 | 0.8% | 0 | 0 |
| 11.0.0 | 1 | 6.7 | 0.8% | 0 | 0 |
| 10.5_base | 3 | 6.5 | 1.6% | 0 | 0 |