Wide area application services

This hub aggregates every CVE we track for Wide area application services, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Wide area application services.

• CVE-2021-1438Cisco Wide Area Application Services Software Information Disclosure Vulnerability5.5May 6, 2021
• CVE-2019-1876Cisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass Vulnerability4.0Jun 20, 2019
• CVE-2018-0352A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root...6.7Jun 7, 2018
• CVE-2018-0329A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote ...5.3Jun 7, 2018
• CVE-2017-12267A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an I...5.3Oct 5, 2017
• CVE-2017-12256A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition ...6.5Oct 5, 2017
• CVE-2017-12250A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an HTTP Application Optimization (AO) related proc...5.3Sep 21, 2017
• CVE-2017-6727A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio...5.3Jul 10, 2017
• CVE-2017-6730A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected sy...5.3Jul 10, 2017
• CVE-2017-6721A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause the WAASNET process to re...5.3Jul 4, 2017
• CVE-2017-6628A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of...6.8May 3, 2017
• CVE-2016-6437A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due t...5.9Oct 27, 2016
• CVE-2015-6421cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers ...7.5Jan 27, 2016
• CVE-2015-0730The SMB module in Cisco Wide Area Application Services (WAAS) 6.0(1) allows remote attackers to cause a denial of service (module reload) via an invalid field in a Negotiate Protocol request, aka B...5.0May 16, 2015
• CVE-2014-3285Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a den...5.0May 29, 2014