Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

20 records in Wide Area Application Services · all components

Priority MEDIUM 52

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a craf…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06002 Published 2013-07-31 No fix listed CWE-20
Priority MEDIUM 46

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.04207 Published 2013-07-31 No fix listed CWE-78
Priority MEDIUM 45

Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue1847…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02427 Published 2014-05-23 No fix listed CWE-94
Priority LOW 35

A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote attacker to read data f…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02317 Published 2018-06-07 No fix listed CWE-798
Priority LOW 33

A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio…

CVSS 3.0MEDIUM 6.8 Network No auth No interaction EPSS 0.01683 Published 2017-05-03 No fix listed CWE-399
Priority LOW 32

A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00384 Published 2018-06-07 No fix listed CWE-264
Priority LOW 32

A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01421 Published 2017-10-05 No fix listed CWE-399
Priority LOW 30

A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an HTTP Application Optimization (AO) related process to restart, causing…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.03081 Published 2017-09-21 No fix listed CWE-399
Priority LOW 28

A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02197 Published 2017-07-10 No fix listed CWE-20
Priority LOW 28

A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause the WAASNET process to restart unexpectedly, cau…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02197 Published 2017-07-04 No fix listed CWE-20
Priority LOW 28

Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (applica…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0297 Published 2014-05-29 No fix listed CWE-20
Priority LOW 27

A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an ICA application optimiza…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01565 Published 2017-10-05 No fix listed CWE-119
Priority LOW 27

A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information D…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01702 Published 2017-07-10 No fix listed CWE-200
Open these records in search →