Cisco Cisco Web Security Appliance (WSA)

Name: Cisco Cisco Web Security Appliance (WSA)
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical11high20medium0low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-0410US	high8.6	4.07% (91st)	—	no fix	2018-08-15	—
CVE-2018-0353US	high7.5	3.76% (90th)	—	no fix	2018-06-07	—
CVE-2021-1359US	high8.8	1.88% (79th)	—	no fix	2021-07-08	≤ n/a
CVE-2018-0087US	medium5.6	1.84% (79th)	—	no fix	2018-03-08	—
CVE-2018-0406US	medium6.1	1.78% (78th)	—	no fix	2018-08-01	—
CVE-2018-0366US	medium6.1	1.78% (78th)	—	no fix	2018-07-16	—
CVE-2019-1817US	high7.5	1.77% (78th)	—	11.5.2-020	2019-05-03	3 versions
CVE-2021-34749US	high8.6	1.68% (77th)	—	no fix	2021-08-18	≤ n/a
CVE-2019-1672US	medium5.8	1.65% (76th)	—	no fix	2019-02-08	3 versions
CVE-2019-1884US	medium6.5	1.49% (74th)	—	10.5.5-005	2019-07-04	2 versions
CVE-2021-34698US	high7.5	1.43% (73rd)	—	no fix	2021-10-06	≤ n/a
CVE-2019-1886US	high8.6	1.35% (71st)	—	10.5.5-005	2019-07-04	2 versions
CVE-2022-20675US	medium5.3	1.29% (70th)	—	no fix	2022-04-06	≤ n/a
CVE-2020-3164US	medium5.3	1.28% (70th)	—	n/a	2020-03-04	2 versions
CVE-2018-0093US	medium6.1	1.22% (69th)	—	no fix	2018-01-18	—
CVE-2021-1129US	medium5.3	1.16% (67th)	—	no fix	2021-01-20	≤ n/a
CVE-2021-1516US	medium6.5	1.00% (63rd)	—	no fix	2021-05-06	≤ n/a
CVE-2019-15956US	high8.8	0.98% (62nd)	—	n/a	2019-11-26	2 versions
CVE-2022-20784US	medium5.3	0.93% (61st)	—	no fix	2022-04-06	≤ n/a
CVE-2020-3117US	medium4.7	0.93% (60th)	—	no fix	2020-09-23	2 versions
CVE-2020-3547US	medium6.5	0.88% (59th)	—	no fix	2020-09-04	≤ n/a
CVE-2019-15969US	medium6.1	0.80% (56th)	—	no fix	2020-09-23	2 versions
CVE-2020-3367US	high7.8	0.80% (56th)	—	no fix	2020-11-18	≤ n/a
CVE-2021-1271US	medium4.8	0.80% (56th)	—	no fix	2021-01-20	≤ n/a
CVE-2021-1490US	medium6.1	0.70% (53rd)	—	no fix	2021-05-06	≤ n/a
CVE-2021-1566US	high7.4	0.67% (52nd)	—	no fix	2021-06-16	≤ n/a
CVE-2019-1816US	high7.8	0.64% (51st)	—	10.1.4-017	2019-05-03	5 versions
CVE-2022-20781US	medium5.4	0.58% (48th)	—	no fix	2022-04-06	≤ n/a
CVE-2023-20120US	medium6.1	0.47% (41st)	—	no fix	2023-06-28	≤ n/a
CVE-2023-20028US	medium5.4	0.47% (41st)	—	no fix	2023-06-28	≤ n/a
CVE-2018-0428US	medium6.7	0.44% (38th)	—	no fix	2018-08-15	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-254CWE-2542 CVEs
CWE-284Improper Access Control2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-112Missing XML Validation1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)24 CVEs
USCisco PSIRT (CSAF)16 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan