cisco expressway

Name: cisco expressway
Brand: cisco

productUS

cpe:2.3:a:cisco:expressway:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical9high5medium0low

updated 2026-10-22

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5	100.0% (100th)	KEV	x14.3.3	2023-10-10	< x14.3.3
CVE-2018-5390US	high7.5	71.8% (99th)	—	no fix	2018-08-06	6 versions
CVE-2017-3790US	high8.6	3.49% (89th)	—	no fix	2017-02-01	21 versions
CVE-2021-34716US	high7.2	2.40% (84th)	—	x14.1	2021-08-18	x8.6.0 → x14.1
CVE-2016-9207US	medium6.5	2.02% (81st)	—	no fix	2016-12-14	2 versions
CVE-2022-20812US	medium6.5	1.93% (80th)	—	x14.0.7	2022-07-06	< x14.0.7
CVE-2017-12287US	medium4.3	1.65% (76th)	—	no fix	2017-10-19	—
CVE-2020-3482US	medium6.5	1.38% (72nd)	—	x12.6.3	2020-11-18	< x12.6.3
CVE-2020-3596US	high7.5	1.23% (69th)	—	no fix	2020-10-08	≤ x12.6.3
CVE-2022-20813US	medium5.9	1.11% (66th)	—	x14.0.7	2022-07-06	< x14.0.7
CVE-2021-34715US	high7.2	1.06% (64th)	—	no fix	2021-08-18	≤ x8.8.0
CVE-2024-20252US	high8.8	0.85% (58th)	—	no fix	2024-02-07	≤ 15.0
CVE-2024-20254US	high8.8	0.80% (56th)	—	no fix	2024-02-07	≤ 15.0
CVE-2024-20255US	high7.1	0.60% (48th)	—	15.0	2024-02-07	< 15.0

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-158Improper Neutralization of Null Byte or NUL Character2 CVEs
CWE-399CWE-3992 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-254CWE-2541 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.