Priority MEDIUM 52
The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a craf…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06002 · Published 2013-07-31 · No fix listed CWE-20
Priority MEDIUM 46
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.04207 · Published 2013-07-31 · No fix listed CWE-78
Priority MEDIUM 45
Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue1847…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02427 · Published 2014-05-23 · No fix listed CWE-94
Priority LOW 38
The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, all…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01978 · Published 2007-07-21 · No fix listed
Priority LOW 37
cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to cause a denial of se…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01931 · Published 2016-01-27 · No fix listed CWE-399
Priority LOW 35
A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote attacker to read data f…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02317 · Published 2018-06-07 · No fix listed CWE-798
Priority LOW 33
A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio…
CVSS 3.0MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.01683 · Published 2017-05-03 · No fix listed CWE-399
Priority LOW 32
A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root.
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00384 · Published 2018-06-07 · No fix listed CWE-264
Priority LOW 32
A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01421 · Published 2017-10-05 · No fix listed CWE-399
Priority LOW 30
A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an HTTP Application Optimization (AO) related process to restart, causing…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03081 · Published 2017-09-21 · No fix listed CWE-399
Priority LOW 30
A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of d…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01729 · Published 2016-10-27 · No fix listed CWE-399
Priority LOW 28
A vulnerability in the HTTPS proxy feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote attacker to use the Central Manager as an HTTPS proxy.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01774 · Published 2019-06-20 · Fixed in 6.4(5.6) CWE-306
Priority LOW 28
A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02197 · Published 2017-07-10 · No fix listed CWE-20
Priority LOW 28
A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause the WAASNET process to restart unexpectedly, cau…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02197 · Published 2017-07-04 · No fix listed CWE-20
Priority LOW 28
Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (applica…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0297 · Published 2014-05-29 · No fix listed CWE-20
Priority LOW 27
A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an ICA application optimiza…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01565 · Published 2017-10-05 · No fix listed CWE-119
Priority LOW 27
A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information D…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01702 · Published 2017-07-10 · No fix listed CWE-200
Priority LOW 26
The SMB module in Cisco Wide Area Application Services (WAAS) 6.0(1) allows remote attackers to cause a denial of service (module reload) via an invalid field in a Negotiate Protocol request, aka Bug ID CSCuo75645.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01428 · Published 2015-05-16 · No fix listed CWE-20
Priority LOW 25
Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output text, which might allow remote attackers to obtain sensitive information via a bru…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01186 · Published 2012-08-06 · No fix listed CWE-200
Priority LOW 24
A vulnerability in Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to gain access to sensitive information on an affected device.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2021-05-06 · No fix listed CWE-668