IW
Product
Ironport Web Security Appliance
5
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add Ironport Web Security Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-34749 | 8.6 | Aug 18 | A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine… Affected: 14.5 |
| CVE-2012-1326 | 7.4 | Jan 15 | Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks Affected: through 7.5 |
| CVE-2021-1516 | 6.5 | May 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and… Affected: 13.6.2-023; 14.0.0-090; 14.0.0-133; 14.0.0-292; 14.0.0-300 |
| CVE-2012-0334 | 6.4 | Jan 15 | Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks Affected: before 7.5 |
| CVE-2012-1316 | 5.9 | Jan 15 | Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks Affected: All versions, or not specified |
Showing 5