Vulnerability Database

383,371

Total vulnerabilities in the database

Vulnerabilities for products matching "web_security_appliance"

Found 1 matching product.

You can search for specific versions with /product/web_security_appliance/1.2.3

cisco / web_security_appliance

56 vulnerabilities found
Title Severity Exploit Date Affected versions
CVE-2023-20120
Medium June 28, 2023 6/28/23
= 14.0.0-418
= 14.0.1-033
= 14.0.1-053
= 15.0.0-050
= 15.0.0-256
CVE-2023-20119
Medium June 28, 2023 6/28/23
= 14.0.0-418
= 14.0.1-033
= 14.0.1-053
= 15.0.0-050
= 15.0.0-256
CVE-2023-20028
Medium June 28, 2023 6/28/23
= 14.0.0-418
= 14.0.1-033
= 14.0.1-053
= 15.0.0-050
= 15.0.0-256
CVE-2023-20032
Critical March 1, 2023 3/1/23
>= 15.0.0, < 15.0.0-254
>= 14.5.0, < 14.5.1-013
>= 14.0.0, < 14.0.4-005
< 12.5.6
CVE-2022-20784
Medium April 6, 2022 4/6/22
>= 11.7.0, < 14.0.2
CVE-2021-1359
Medium July 8, 2021 7/8/21
= 11.8.0-429
= 11.8.0-453
CVE-2021-1490
Medium May 6, 2021 5/6/21
< 14.0
CVE-2021-1129
Medium January 20, 2021 1/20/21
= 11.8.0
CVE-2020-3117
Medium September 23, 2020 9/23/20
= 11.8.0-382
= 12.0.1-268
CVE-2019-15969
Medium September 23, 2020 9/23/20
< 11.8.0
CVE-2020-3164
Medium March 4, 2020 3/4/20
<= 12.0.1-268
CVE-2019-15956
High November 26, 2019 11/26/19
= 10.5.2-072
= 11.5.1-fcs-125
= 11.7.0-fcs-418
CVE-2019-1886
High July 4, 2019 7/4/19
= 10.5.2-072
= 10.5.3-025
= 11.7.0-fcs-334
CVE-2019-1884
High July 4, 2019 7/4/19
= 10.1.4-017
= 10.5.2-072
= 11.5.1-fcs-125
= 11.7.0-256
CVE-2019-1817
High May 3, 2019 5/3/19
= 11.5.1-fcs-115
= 11.5.1-fcs-124
= 11.5.1-fcs-125
= 11.7.0-fcs-334
CVE-2019-1816
High May 3, 2019 5/3/19
= 10.5.2-072
= 11.0.0-641
= 11.5.0-fcs-614
= wsa10.5.0-fcs-000
CVE-2019-1672
Medium February 8, 2019 2/8/19
= 10.1.0-204
= 10.5.2-072
= 11.5.1-fcs-115
CVE-2018-0428
High August 15, 2018 8/15/18
= 11.0.0-fcs-250
= 11.5.0-fcs-000
= wsa10.0.0-959
= wsa10.5.0-fcs-000
CVE-2018-0410
High August 15, 2018 8/15/18
= 9.1.1-074
= 9.1.2-010
= 9.1.2-022
= 9.1.2-039
= 10.1.0-204
= 10.1.1-235
= 10.5.1-270
= 10.5.1-296
= 10.5.2-042
= 11.0.0-641
CVE-2018-0406
Medium August 1, 2018 8/1/18
= 10.1.2-003
= 10.5.1-269
= 11.5.0-fcs-581
CVE-2018-0366
Medium July 16, 2018 7/16/18
= 10.1.2-003
= 10.5.1-276
CVE-2018-0353
Medium June 7, 2018 6/7/18
= 10.5.1
= 10.5.1-296
= 10.5.2
= 11.0.0
= 11.5.0-fcs-442
CVE-2018-0093
Medium January 18, 2018 1/18/18
All versions
CVE-2017-6783
Medium August 17, 2017 8/17/17
= 10.0.0-230
CVE-2017-6746
High July 25, 2017 7/25/17
= 10.0.0-233
= 10.0_base
= 10.1.0
= 10.1.0-204
= 10.1.1-230
= 10.1.1-234
= 10.5.0
= 10.5.0-358
= 11.0.0
= 11.0.0-613
= 11.0.0-641
CVE-2017-6748
High July 25, 2017 7/25/17
= 10.0.0-232
= 10.0.0-233
= 10.0_base
= 10.1.0
= 10.1.0-204
= 10.1.1-230
= 10.5.0
= 10.5.0-358
= 11.0.0
= 11.0.0-613
CVE-2017-6749
Low July 25, 2017 7/25/17
= 10.0.0-232
= 10.0.0-233
= 10.0_base
= 10.1.0
= 10.1.0-204
= 10.1.1-230
= 10.1.1-234
= 10.1.1-235
= 10.5.0
= 10.5.0-358
= 10.5.1-270
CVE-2017-6750
Medium July 25, 2017 7/25/17
= 10.0.0-232
= 10.0.0-233
= 10.0_base
= 10.1.0
= 10.1.0-204
= 10.1.1-230
= 10.1.1-234
= 10.1.1-235
= 10.5.0
= 10.5.0-358
CVE-2017-6751
High July 25, 2017 7/25/17
= 9.0.0-162
= 9.0.0-193
= 9.0.0-485
= 10.0.0-232
= 10.0.0-233
= 10.1.0-204
CVE-2017-3870
Medium March 17, 2017 3/17/17
= 8.5.3-069
= 9.1.1-074
= 9.1.2-010
CVE-2017-3827
Medium February 22, 2017 2/22/17
= 10.0.0-082
= 10.0.0-124
= 10.0.0-125
= 10.0.0-203
= 10.0.0-232
CVE-2016-9212
Medium December 14, 2016 12/14/16
= 9.0.1-162
= 9.1.1-074
CVE-2016-6469
Medium December 14, 2016 12/14/16
= 9.0.1-162
= 9.1.1-074
CVE-2016-1411
Medium December 14, 2016 12/14/16
= 7.7.0-608
= 7.7.5-835
= 8.8.0-000
CVE-2016-6372
Medium October 28, 2016 10/28/16
= 5.6.0-623
= 6.0.0-000
= 7.1.0
= 7.1.1
= 7.1.2
= 7.1.3
= 7.1.4
= 7.5.0-000
= 7.5.0-825
= 7.5.1-000
= 7.5.2-000
= 7.5.2-hp2-303
= 7.7.0-000
= 7.7.0-608
= 7.7.1-000
= 7.7.5-835
= 8.0.0-000
= 8.0.5
= 8.0.6
= 8.0.6-078
= 8.0.6-119
= 8.0.7
= 8.0.7-142
= 8.0.8-mr-113
= 8.5.0-497
= 8.5.0.000
= 8.5.1-021
= 8.5.2-024
= 8.5.2-027
= 8.5.3-055
= 8.8.0-000
= 8.8.0-085
= 9.0.0-193
= 9.0_base
= 9.1.0-000
= 9.1.0-070
= 9.1_base
= 9.5.0-235
= 9.5.0-284
= 9.5.0-444
= 9.5_base
CVE-2016-6360
Medium October 28, 2016 10/28/16
= 8.8.0-085
= 9.0.0-193
= 9.0_base
= 9.1.0-000
= 9.1.0-070
= 9.1_base
= 9.5.0-235
= 9.5.0-284
= 9.5.0-444
= 9.5_base
CVE-2016-6416
Medium October 5, 2016 10/5/16
= 9.0.0-162
= 9.1.0-000
= 9.1.0-070
= 9.1_base
= 9.5.0-235
= 9.5.0-284
= 9.5.0-444
= 9.5_base
CVE-2016-6407
Medium September 17, 2016 9/17/16
= 5.6.0-623
= 6.0.0-000
= 7.1.0
= 7.1.1
= 7.1.2
= 7.1.3
= 7.1.4
= 7.5.0-000
= 7.5.0-825
= 7.5.1-000
= 7.5.2-000
= 7.5.2-hp2-303
= 7.7.0-000
= 7.7.0-608
= 7.7.1-000
= 7.7.5-835
= 8.0.0-000
= 8.0.5
= 8.0.6
= 8.0.6-078
= 8.0.6-119
= 8.0.7
= 8.0.7-142
= 8.0.8-mr-113
= 8.5.0-497
= 8.5.0.000
= 8.5.1-021
= 8.5.2-024
= 8.5.2-027
= 8.5.3-055
= 8.8.0-000
= 8.8.0-085
= 9.0.0-193
= 9.0_base
= 9.1.0-000
= 9.1.0-070
= 9.1_base
= 9.5.0-235
= 9.5.0-284
= 9.5.0-444
= 9.5_base
CVE-2016-1440
Medium July 2, 2016 7/2/16
= 5.6.0-623
= 6.0.0-000
= 7.1.0
= 7.1.1
= 7.1.2
= 7.1.3
= 7.1.4
= 7.5.0-000
= 7.5.0-825
= 7.5.1-000
= 7.5.2-000
= 7.5.2-hp2-303
= 7.7.0-000
= 7.7.0-608
= 7.7.1-000
= 7.7.5-835
= 8.0.0-000
= 8.0.5
= 8.0.5_hp1
= 8.0.6
= 8.0.6-078
= 8.0.6-119
= 8.0.7
= 8.0.7-142
= 8.0.8-mr-113
= 8.5.0-497
= 8.5.0.000
= 8.5.1-021
= 8.5.2-024
= 8.5.2-027
= 8.5.3-055
= 8.8.0-000
= 8.8.0-085
= 9.0.0-193
= 9.0_base
= 9.1.0-000
= 9.1.0-070
CVE-2016-1405
Medium June 8, 2016 6/8/16
= 8.8.0-085
= 9.1.0-070
= 9.5.0-284
CVE-2016-1381
High May 25, 2016 5/25/16
= 8.5.0-497
= 8.5.0.000
= 8.5.1-021
= 8.5.2-024
= 8.5.2-027
= 8.5.3-055
= 9.0.0-193
= 9.0_base
= 9.1.0-000
= 9.1_base
CVE-2016-1380
High May 25, 2016 5/25/16
= 8.0.0-000
= 8.0.5
= 8.0.6
= 8.0.6-078
= 8.0.6-119
= 8.0.7
= 8.0.7-142
= 8.0.8-mr-113
= 8.5.0-000
= 8.5.0-497
= 8.5.1-021
= 8.5.2-024
= 8.5.2-027
= 8.5.3-055
CVE-2016-1288
Medium March 3, 2016 3/3/16
= 9.0.0-193
= 8.5.0-497
CVE-2016-1296
Medium January 20, 2016 1/20/16
= 8.5.3-055
= 9.1.0-000
= 9.5.0-235
CVE-2015-6386
Medium December 1, 2015 12/1/15
= 8.0.7-142
= 8.5.1-021
CVE-2015-6298
High November 6, 2015 11/6/15
= 8.5.0-497
CVE-2015-6292
High November 6, 2015 11/6/15
= 8.0.0-000
= 8.0.5
= 8.0.5-hp1
= 8.0.6
= 8.0.6-119
= 8.5.0-497
= 8.5.0.000
CVE-2015-6321
High November 6, 2015 11/6/15
= 5.6.0-623
= 6.0.0-000
= 7.5.0-000
= 7.5.0-825
= 7.5.1-000
= 7.5.2-000
= 7.7.0-000
= 7.7.1-000
= 8.0.0-000
= 8.5.0.000
CVE-2015-6293
High November 6, 2015 11/6/15
= 8.0.0-000
= 8.0.5
= 8.0.5-hp1
= 8.0.6
= 8.0.6-078
= 8.0.7-142
= 8.0.8-mr-113
= 8.5.0-497
= 8.5.0.000
= 8.5.2-024
CVE-2015-4288
Medium July 29, 2015 7/29/15
= 8.5.0-000

Frequently Asked Questions

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

CVSS (Common Vulnerability Scoring System) estimates technical severity, but it doesn't automatically equal business risk. Prioritize using context like internet exposure, affected asset criticality, known exploitation (proof-of-concept or in-the-wild), and whether compensating controls exist. A "Medium" CVSS on an exposed, production system can be more urgent than a "Critical" on an isolated, non-production host.

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. In practice, risk increases sharply when exploitation becomes reliable or widespread.

Recurring findings usually come from incomplete Asset Discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host. Unknown or unmanaged assets (often called Shadow IT) are a common reason the same issues resurface.

Use a simple, repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress using consistent metrics so remediation is steady, not reactive.

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.