Cisco Web Security Appliance Vulnerabilità

Sequenza temporale

Versione

9.0.1-1626
9.1.1-0744
8.5.0-4974
8.5.1-0214
8.54

Contromisure

Official Fix58
Temporary Fix0
Workaround2
Unavailable2
Not Defined10

Sfruttabilità

High2
Functional0
Proof-of-Concept0
Unproven10
Not Defined60

Accesso al vettore

Not Defined0
Physical0
Local8
Adjacent0
Network64

Autenticazione

Not Defined0
High4
Low16
None52

Interazione dell'utente

Not Defined0
Required12
None60

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤514
≤624
≤714
≤812
≤96
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤516
≤624
≤712
≤812
≤94
≤100

VulDB

≤10
≤20
≤30
≤46
≤512
≤622
≤76
≤820
≤96
≤100

NVD

≤10
≤20
≤30
≤40
≤58
≤610
≤76
≤818
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤68
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤82
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k0
<5k0
<10k4
<25k42
<50k24
<100k2
≥100k0

Exploiter aujourd'hui

<1k38
<2k10
<5k8
<10k8
<25k8
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Versions (55): 7.1, 7.5, 7.5.2-201, 7.5.2-HP2-303, 7.5.7.7, 7.6.3-025, 7.7, 7.7.0-608, 7.7.5-835, 7.9.1-102, 8.0, 8.0.0-404, 8.0.1-023, 8.0.6-078, 8.0.6-115, 8.0.7, 8.0.7-142, 8.1.1-013, 8.2.0-222, 8.3.6-048, 8.5, 8.5.0-, 8.5.0-497, 8.5.0-ER1-198, 8.5.0-ise-147, 8.5.1-021, 8.5.3-051, 8.5.3-055, 8.5.3-069, 8.5.6-113, 8.5.7-042, 8.6, 8.7, 8.8, 8.8.0-, 9.0.0-485, 9.0.1-162, 9.1, 9.1.0-, 9.1.0-032, 9.1.1-, 9.1.1-074, 9.1.2-01, 9.5.0-235, 9.5.0-444, 9.6.0-, 9.9.9-894, 10.0.0-203, 10.1, 10.1.0-204, 10.5, 10.5.1, 10.5.2, 11, WSA10.0.0-233

Link to Product Website: https://www.cisco.com/

Tipo di software: Anti-Malware Software

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
07/04/20224.44.4Cisco Web Security Appliance Web-based Management Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20781
07/04/20226.66.4Cisco Web Security Appliance Web-Based Reputation Score Engine escalazione di privilegi$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20784
07/04/20225.35.2Cisco Email Security Appliance Service Port 199 denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2022-20675
07/10/20216.96.8Cisco Web Security Appliance HTTPS Connection denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-34698
19/08/20217.37.0Cisco Web Security Appliance SNI Filter escalazione di privilegi$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-34749
09/07/20218.88.4Cisco Web Security Appliance Web Interface escalazione di privilegi$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2021-1359
17/06/20215.65.4Cisco Email Security Appliance/Web Security Appliance Advanced Malware Protection autenticazione debole$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1566
06/05/20214.34.1Cisco Web Security Appliance Web-based Management Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1490
21/01/20214.14.0Cisco Web Security Appliance Web-based Management Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1271
21/01/20215.35.1Cisco Email Security Appliance escalazione di privilegi$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1129

61 non vengono visualizzate più voci

altre voci di Cisco

Want to stay up to date on a daily basis?

Enable the mail alert feature now!