Cisco Cisco Secure Web Appliance

Name: Cisco Cisco Secure Web Appliance
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical10high15medium0low

updated 2026-10-28

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	—
CVE-2025-32433US	—OT critical	98.9% (100th)	KEV	no fix	2025-04-16	—
CVE-2026-20217US	—	0.57% (47th)	Exploit	no fix	2026-07-01	—
CVE-2023-20032US	critical9.8	30.1% (98th)	—	no fix	2023-03-01	20 versions
CVE-2022-20871US	high8.8	1.92% (80th)	—	no fix	2024-11-15	12 versions
CVE-2021-1359US	high8.8	1.88% (79th)	—	no fix	2021-07-08	—
CVE-2021-34749US	high8.6	1.68% (77th)	—	no fix	2021-08-18	—
CVE-2021-34698US	high7.5	1.43% (73rd)	—	no fix	2021-10-06	—
CVE-2022-20675US	medium5.3	1.29% (70th)	—	no fix	2022-04-06	—
CVE-2021-1129US	medium5.3	1.16% (67th)	—	no fix	2021-01-20	—
CVE-2021-1516US	medium6.5	1.00% (63rd)	—	no fix	2021-05-06	—
CVE-2022-20942US	medium6.5OT elevated	0.98% (62nd)	—	no fix	2022-11-04	15 versions
CVE-2022-20784US	medium5.3	0.93% (61st)	—	no fix	2022-04-06	—
CVE-2020-3547US	medium6.5	0.88% (59th)	—	no fix	2020-09-04	—
CVE-2025-20184US	high7.2	0.86% (58th)	—	no fix	2025-02-05	54 versions
CVE-2020-3367US	high7.8	0.80% (56th)	—	no fix	2020-11-18	—
CVE-2021-1271US	medium4.8	0.80% (56th)	—	no fix	2021-01-20	—
CVE-2022-20868US	high8.8OT elevated	0.76% (55th)	—	no fix	2022-11-04	12 versions
CVE-2021-1490US	medium6.1	0.70% (53rd)	—	no fix	2021-05-06	—
CVE-2022-20952US	medium5.3	0.68% (52nd)	—	no fix	2023-03-01	14 versions
CVE-2021-1566US	high7.4	0.67% (52nd)	—	no fix	2021-06-16	—
CVE-2023-20215US	medium5.3	0.62% (50th)	—	no fix	2023-08-03	22 versions
CVE-2022-20781US	medium5.4	0.58% (48th)	—	no fix	2022-04-06	—
CVE-2026-20244US	—	0.57% (47th)	—	no fix	2026-07-01	—
CVE-2026-20243US	—	0.57% (47th)	—	no fix	2026-07-01	—
CVE-2026-20216US	—	0.57% (47th)	—	no fix	2026-07-01	—
CVE-2026-20215US	—	0.57% (47th)	—	no fix	2026-07-01	—
CVE-2026-20214US	—	0.57% (47th)	—	no fix	2026-07-01	—
CVE-2026-20213US	—	0.57% (47th)	—	no fix	2026-07-01	—
CVE-2023-20120US	medium6.1	0.47% (41st)	—	no fix	2023-06-28	—
CVE-2023-20028US	medium5.4	0.47% (41st)	—	no fix	2023-06-28	—
CVE-2025-20183US	medium5.3	0.44% (38th)	—	no fix	2025-02-05	52 versions
CVE-2025-20207US	—	0.34% (28th)	—	no fix	2025-02-05	50 versions
CVE-2026-20152US	—	0.30% (23rd)	—	no fix	2026-04-15	59 versions
CVE-2024-20504US	—	0.29% (22nd)	—	no fix	2024-11-06	20 versions
CVE-2024-20256US	—	0.29% (22nd)	—	no fix	2024-05-15	24 versions
CVE-2025-20185US	medium6.7	0.19% (8th)	—	no fix	2025-02-05	54 versions
CVE-2024-20435US	high7.8	0.16% (6th)	—	no fix	2024-07-17	28 versions
CVE-2026-20056US	—OT elevated	0.16% (5th)	—	no fix	2026-02-04	60 versions
CVE-2023-20099US	—	—	—	no fix	—	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')7 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-250Execution with Unnecessary Privileges2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-112Missing XML Validation1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

sources (2)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)38 CVEs
EUEU Vulnerability Database (ENISA)15 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan