Cisco Cisco Secure Web Appliance

• CVE-2026-20152 Medium 5.3 Cisco Secure Web Appliance Authentication Service Traffic Bypass Vulnerability 0.3%
• CVE-2026-20056 Medium 4.0 Cisco Secure Web Appliance TBD Bypass Vulnerability 0.2%
• CVE-2025-20207 Medium 4.3 Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability 0.3%
• CVE-2025-20185 Low 3.4 Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability 0.2%
• CVE-2025-20184 Medium 6.5 Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability 0.9%
• CVE-2025-20183 Medium 5.8 Cisco Secure Web Appliance Range Request Bypass Vulnerability 0.4%
• CVE-2022-20871 Medium 6.3 Cisco Secure Web Appliance Privilege Escalation Vulnerability 1.9%
• CVE-2024-20504 Medium 5.4 Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities 0.3%
• CVE-2024-20435 High 8.8 A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is 0.2%
• CVE-2024-20256 Medium 4.8 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct 0.3%
• CVE-2023-20215 Medium 5.8 A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule, allowing traffic onto a ne 0.6%
• CVE-2022-20952 Medium 5.3 A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), could allow an unauthenticated, remote attacker 0.7%
• CVE-2023-20032 Critical 9.8 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earl 30.1%
• CVE-2022-20942 Medium 6.5 A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known as Cisco Web Security 1.1%
• CVE-2022-20868 Medium 4.7 A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker 0.8%