Vulnerability Database

325,773

Total vulnerabilities in the database

Vulnerabilities for products matching "web_security_appliance"

Found 1 matching product.

You can search for specific versions with /product/web_security_appliance/1.2.3

cisco / web_security_appliance

56 vulnerabilities found
Title Severity Exploit Date Affected Version
CVE-2023-20120
Medium June 28, 2023 6/28/23
== 14.0.1-053
== 15.0.0-256
== 14.0.1-033
== 14.0.0-418
== 15.0.0-050
CVE-2023-20119
Medium June 28, 2023 6/28/23
== 14.0.1-053
== 15.0.0-256
== 14.0.1-033
== 14.0.0-418
== 15.0.0-050
CVE-2023-20028
Medium June 28, 2023 6/28/23
== 14.0.1-053
== 15.0.0-256
== 14.0.1-033
== 14.0.0-418
== 15.0.0-050
CVE-2023-20032
Critical March 1, 2023 3/1/23
>= 15.0.0 < 15.0.0-254
>= 14.5.0 < 14.5.1-013
>= 14.0.0 < 14.0.4-005
< 12.5.6
CVE-2022-20784
Medium April 6, 2022 4/6/22
>= 11.7.0 < 14.0.2
CVE-2021-1359
Medium July 8, 2021 7/8/21
== 11.8.0-429
== 11.8.0-453
CVE-2021-1490
Low May 6, 2021 5/6/21
< 14.0
CVE-2021-1129
Medium January 20, 2021 1/20/21
== 11.8.0
CVE-2020-3117
Low September 23, 2020 9/23/20
== 11.8.0-382
== 12.0.1-268
CVE-2019-15969
Medium September 23, 2020 9/23/20
< 11.8.0
CVE-2020-3164
Medium March 4, 2020 3/4/20
<= 12.0.1-268
CVE-2019-15956
High November 26, 2019 11/26/19
== 10.5.2-072
== 11.5.1-fcs-125
== 11.7.0-fcs-418
CVE-2019-1886
High July 4, 2019 7/4/19
== 10.5.2-072
== 11.7.0-fcs-334
== 10.5.3-025
CVE-2019-1884
Low July 4, 2019 7/4/19
== 10.5.2-072
== 11.5.1-fcs-125
== 10.1.4-017
== 11.7.0-256
CVE-2019-1817
High May 3, 2019 5/3/19
== 11.5.1-fcs-115
== 11.5.1-fcs-124
== 11.5.1-fcs-125
== 11.7.0-fcs-334
CVE-2019-1816
High May 3, 2019 5/3/19
== 11.0.0-641
== 10.5.2-072
== 11.5.0-fcs-614
== wsa10.5.0-fcs-000
CVE-2019-1672
Medium February 8, 2019 2/8/19
== 10.1.0-204
== 11.5.1-fcs-115
== 10.5.2-072
CVE-2018-0428
High August 15, 2018 8/15/18
== 11.0.0-fcs-250
== 11.5.0-fcs-000
== wsa10.0.0-959
== wsa10.5.0-fcs-000
CVE-2018-0410
High August 15, 2018 8/15/18
== 10.1.0-204
== 9.1.1-074
== 10.5.1-270
== 11.0.0-641
== 10.1.1-235
== 9.1.2-010
== 10.5.1-296
== 10.5.2-042
== 9.1.2-022
== 9.1.2-039
CVE-2018-0406
Low August 1, 2018 8/1/18
== 10.1.2-003
== 10.5.1-269
== 11.5.0-fcs-581
CVE-2018-0366
Low July 16, 2018 7/16/18
== 10.1.2-003
== 10.5.1-276
CVE-2018-0353
Medium June 7, 2018 6/7/18
== 11.0.0
== 11.5.0-fcs-442
== 10.5.1-296
== 10.5.1
== 10.5.2
CVE-2018-0093
Low January 18, 2018 1/18/18
*
CVE-2017-6783
Low August 17, 2017 8/17/17
== 10.0.0-230
CVE-2017-6746
High July 25, 2017 7/25/17
== 10.1.1-234
== 10.5.0
== 10.1.0-204
== 11.0.0-641
== 10.1.0
== 10.1.1-230
== 11.0.0
== 10.5.0-358
== 10.0.0-233
== 11.0.0-613
== 10.0_base
CVE-2017-6748
High July 25, 2017 7/25/17
== 10.5.0
== 10.1.0-204
== 10.0.0-232
== 10.1.0
== 10.1.1-230
== 11.0.0
== 10.5.0-358
== 10.0.0-233
== 11.0.0-613
== 10.0_base
CVE-2017-6749
Low July 25, 2017 7/25/17
== 10.1.1-234
== 10.5.0
== 10.1.0-204
== 10.5.1-270
== 10.0.0-232
== 10.1.0
== 10.1.1-235
== 10.1.1-230
== 10.5.0-358
== 10.0.0-233
== 10.0_base
CVE-2017-6750
Medium July 25, 2017 7/25/17
== 10.1.1-234
== 10.5.0
== 10.1.0-204
== 10.0.0-232
== 10.1.0
== 10.1.1-235
== 10.1.1-230
== 10.5.0-358
== 10.0.0-233
== 10.0_base
CVE-2017-6751
High July 25, 2017 7/25/17
== 10.1.0-204
== 10.0.0-232
== 9.0.0-162
== 9.0.0-193
== 10.0.0-233
== 9.0.0-485
CVE-2017-3870
Medium March 17, 2017 3/17/17
== 9.1.1-074
== 8.5.3-069
== 9.1.2-010
CVE-2017-3827
Medium February 22, 2017 2/22/17
== 10.0.0-232
== 10.0.0-124
== 10.0.0-082
== 10.0.0-125
== 10.0.0-203
CVE-2016-9212
Medium December 14, 2016 12/14/16
== 9.1.1-074
== 9.0.1-162
CVE-2016-6469
Medium December 14, 2016 12/14/16
== 9.1.1-074
== 9.0.1-162
CVE-2016-1411
Low December 14, 2016 12/14/16
== 7.7.0-608
== 8.8.0-000
== 7.7.5-835
CVE-2016-6372
Medium October 28, 2016 10/28/16
== 8.0.7
== 7.5.2-hp2-303
== 7.5.2-000
== 9.5.0-284
== 8.0.6-078
== 7.1.1
== 9.5.0-235
== 7.1.4
== 8.5.0.000
== 8.5.3-055
== 8.0.7-142
== 7.1.0
== 9.0_base
== 7.5.0-825
== 7.7.0-608
== 8.8.0-000
== 8.0.0-000
== 8.5.2-024
== 7.5.0-000
== 8.5.2-027
== 8.0.6
== 7.1.3
== 9.1_base
== 7.1.2
== 8.0.8-mr-113
== 8.5.0-497
== 9.1.0-000
== 8.8.0-085
== 7.5.1-000
== 6.0.0-000
== 5.6.0-623
== 9.0.0-193
== 7.7.5-835
== 8.5.1-021
== 9.5_base
== 8.0.5
== 8.0.6-119
== 9.1.0-070
== 7.7.0-000
== 9.5.0-444
== 7.7.1-000
CVE-2016-6360
Medium October 28, 2016 10/28/16
== 9.5.0-284
== 9.5.0-235
== 9.0_base
== 9.1_base
== 9.1.0-000
== 8.8.0-085
== 9.0.0-193
== 9.5_base
== 9.1.0-070
== 9.5.0-444
CVE-2016-6416
Low October 5, 2016 10/5/16
== 9.5.0-284
== 9.5.0-235
== 9.0.0-162
== 9.1_base
== 9.1.0-000
== 9.5_base
== 9.1.0-070
== 9.5.0-444
CVE-2016-6407
Medium September 17, 2016 9/17/16
== 8.0.7
== 7.5.2-hp2-303
== 7.5.2-000
== 9.5.0-284
== 8.0.6-078
== 7.1.1
== 9.5.0-235
== 7.1.4
== 8.5.0.000
== 8.5.3-055
== 8.0.7-142
== 7.1.0
== 9.0_base
== 7.5.0-825
== 7.7.0-608
== 8.8.0-000
== 8.0.0-000
== 8.5.2-024
== 7.5.0-000
== 8.5.2-027
== 8.0.6
== 7.1.3
== 9.1_base
== 7.1.2
== 8.0.8-mr-113
== 8.5.0-497
== 9.1.0-000
== 8.8.0-085
== 7.5.1-000
== 6.0.0-000
== 5.6.0-623
== 9.0.0-193
== 7.7.5-835
== 8.5.1-021
== 9.5_base
== 8.0.5
== 8.0.6-119
== 9.1.0-070
== 7.7.0-000
== 9.5.0-444
== 7.7.1-000
CVE-2016-1440
Medium July 2, 2016 7/2/16
== 8.0.7
== 7.5.2-hp2-303
== 7.5.2-000
== 8.0.6-078
== 7.1.1
== 7.1.4
== 8.5.0.000
== 8.5.3-055
== 8.0.7-142
== 7.1.0
== 9.0_base
== 7.5.0-825
== 7.7.0-608
== 8.8.0-000
== 8.0.0-000
== 8.5.2-024
== 7.5.0-000
== 8.5.2-027
== 8.0.6
== 7.1.3
== 7.1.2
== 8.0.8-mr-113
== 8.5.0-497
== 8.0.5_hp1
== 9.1.0-000
== 8.8.0-085
== 7.5.1-000
== 6.0.0-000
== 5.6.0-623
== 9.0.0-193
== 7.7.5-835
== 8.5.1-021
== 8.0.5
== 8.0.6-119
== 9.1.0-070
== 7.7.0-000
== 7.7.1-000
CVE-2016-1405
Medium June 8, 2016 6/8/16
== 8.8.0-085
== 9.1.0-070
== 9.5.0-284
CVE-2016-1381
High May 25, 2016 5/25/16
== 8.5.0-497
== 8.5.0.000
== 8.5.1-021
== 8.5.2-024
== 8.5.2-027
== 8.5.3-055
== 9.0.0-193
== 9.0_base
== 9.1.0-000
== 9.1_base
CVE-2016-1380
High May 25, 2016 5/25/16
== 8.0.0-000
== 8.0.5
== 8.0.6
== 8.0.6-078
== 8.0.6-119
== 8.0.7
== 8.0.7-142
== 8.0.8-mr-113
== 8.5.0-000
== 8.5.0-497
== 8.5.1-021
== 8.5.2-024
== 8.5.2-027
== 8.5.3-055
CVE-2016-1288
Medium March 3, 2016 3/3/16
== 8.5.0-497
== 9.0.0-193
CVE-2016-1296
Medium January 20, 2016 1/20/16
== 9.5.0-235
== 8.5.3-055
== 9.1.0-000
CVE-2015-6386
Medium December 1, 2015 12/1/15
== 8.0.7-142
== 8.5.1-021
CVE-2015-6298
High November 6, 2015 11/6/15
== 8.5.0-497
CVE-2015-6292
High November 6, 2015 11/6/15
== 8.5.0.000
== 8.0.5-hp1
== 8.0.0-000
== 8.0.6
== 8.5.0-497
== 8.0.5
== 8.0.6-119
CVE-2015-6321
High November 6, 2015 11/6/15
== 7.5.2-000
== 8.5.0.000
== 7.5.0-825
== 8.0.0-000
== 7.5.0-000
== 7.5.1-000
== 6.0.0-000
== 5.6.0-623
== 7.7.0-000
== 7.7.1-000
CVE-2015-6293
High November 6, 2015 11/6/15
== 8.0.6-078
== 8.5.0.000
== 8.0.5-hp1
== 8.0.7-142
== 8.0.0-000
== 8.5.2-024
== 8.0.6
== 8.0.8-mr-113
== 8.5.0-497
== 8.0.5
CVE-2015-4288
Low July 29, 2015 7/29/15
== 8.5.0-000

Frequently Asked Questions

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

CVSS (Common Vulnerability Scoring System) estimates technical severity, but it doesn't automatically equal business risk. Prioritize using context like internet exposure, affected asset criticality, known exploitation (proof-of-concept or in-the-wild), and whether compensating controls exist. A "Medium" CVSS on an exposed, production system can be more urgent than a "Critical" on an isolated, non-production host.

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. In practice, risk increases sharply when exploitation becomes reliable or widespread.

Recurring findings usually come from incomplete Asset Discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host. Unknown or unmanaged assets (often called Shadow IT) are a common reason the same issues resurface.

Use a simple, repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress using consistent metrics so remediation is steady, not reactive.

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.