Cisco Cisco Content Security Management Appliance (SMA)

Name: Cisco Cisco Content Security Management Appliance (SMA)
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high12medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-1983US	medium5.3	1.86% (79th)	—	no fix	2020-09-23	—
CVE-2018-0140US	medium6.5	1.56% (75th)	—	no fix	2018-02-08	—
CVE-2020-3370US	medium5.8	1.28% (70th)	—	no fix	2020-07-16	—
CVE-2020-3164US	medium5.3	1.28% (70th)	—	no fix	2020-03-04	—
CVE-2018-15393US	medium6.1	1.23% (69th)	—	no fix	2018-11-08	≤ n/a
CVE-2019-12635US	medium4.3	1.02% (63rd)	—	12.5.0	2019-09-05	unspecified → 12.5.0
CVE-2020-3117US	medium4.7	0.93% (60th)	—	no fix	2020-09-23	—
CVE-2020-3178US	medium6.1	0.84% (58th)	—	no fix	2020-05-06	≤ n/a
CVE-2021-1561US	medium5.4	0.74% (55th)	—	no fix	2021-08-18	≤ n/a
CVE-2020-3447US	medium6.5	0.74% (54th)	—	no fix	2020-08-17	—
CVE-2021-1425US	medium6.5	0.53% (45th)	—	no fix	2024-11-18	—
CVE-2018-0095US	high7.8	0.40% (34th)	—	no fix	2018-01-18	—
CVE-2021-1447US	medium6.7	0.27% (20th)	—	no fix	2021-05-06	≤ n/a

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
CWE-264CWE-2641 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.