Ironport web security appliance

This hub aggregates every CVE we track for Ironport web security appliance, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Ironport web security appliance.

• CVE-2021-34749Multiple Cisco Products Server Name Identification Data Exfiltration Vulnerability5.8Aug 18, 2021
• CVE-2021-1516Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability4.3May 6, 2021
• CVE-2012-1326Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks7.4Jan 15, 2020
• CVE-2012-1316Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks5.9Jan 15, 2020
• CVE-2012-0334Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks6.4Jan 15, 2020