Cisco Ironport_web_security_appliance
5 CVEs affecting Cisco Ironport_web_security_appliance. Latest disclosed: 2021-08-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-1326 | High | 7.4 | 2020-01-15 | Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM att… |
CVE-2012-0334 | Medium | 6.4 | 2020-01-15 | Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks |
CVE-2012-1316 | Medium | 5.9 | 2020-01-15 | Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks |
CVE-2021-34749 | Medium | 5.8 | 2021-08-18 | A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snor… |
CVE-2021-1516 | Medium | 4.3 | 2021-05-06 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security App… |