cisco content security management appliance

Name: cisco content security management appliance
Brand: cisco

productUS

cpe:2.3:a:cisco:content_security_management_appliance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical2high16medium0low

updated 2026-10-26

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	no fix	2016-09-01	2 versions
CVE-2015-6321US	high7.8	2.76% (86th)	—	no fix	2015-11-06	16 versions
CVE-2015-6288US	medium5.0	2.21% (82nd)	—	no fix	2015-09-14	= 7.8_base
CVE-2016-6416US	medium5.9	2.02% (81st)	—	no fix	2016-10-05	7 versions
CVE-2019-1983US	medium5.3	1.86% (79th)	—	no fix	2020-09-23	= 11.4.0-812
CVE-2015-4322US	medium5.5	1.70% (77th)	—	no fix	2015-08-19	3 versions
CVE-2017-6783US	medium4.3	1.34% (71st)	—	no fix	2017-08-17	= 10.1.0-037
CVE-2020-3164US	medium5.3	1.28% (70th)	—	13.6.0	2020-03-04	< 13.6.0
CVE-2017-6661US	medium6.1	1.24% (69th)	—	no fix	2017-06-13	2 versions
CVE-2018-15393US	medium6.1	1.23% (69th)	—	no fix	2018-11-08	—
CVE-2021-1129US	medium5.3	1.16% (67th)	—	no fix	2021-01-20	= 12.5.0
CVE-2016-1411US	medium5.9	1.12% (66th)	—	no fix	2016-12-14	6 versions
CVE-2019-12635US	medium4.3	1.02% (63rd)	—	12.5.0	2019-09-05	< 12.5.0
CVE-2021-1516US	medium6.5	1.00% (63rd)	—	no fix	2021-05-06	—
CVE-2020-3117US	medium4.7	0.93% (60th)	—	13.0.0-187	2020-09-23	< 13.0.0-187
CVE-2020-3178US	medium6.1	0.84% (58th)	—	13.6.0	2020-05-06	< 13.6.0
CVE-2020-3447US	medium6.5	0.74% (54th)	—	13.6.1-201	2020-08-17	< 13.6.1-201
CVE-2021-1447US	medium6.7	0.27% (19th)	—	13.8.1-068	2021-05-06	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-399CWE-3992 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.