Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-06	CVE-2021-1516	Information Exposure Through Source Code vulnerability in Cisco products A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to access sensitive information on an affected device. network low complexity cisco CWE-540	6.5
2020-01-15	CVE-2012-1316	Improper Certificate Validation vulnerability in Cisco Ironport web Security Appliance Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks network high complexity cisco CWE-295	5.9
2020-01-15	CVE-2012-0334	Improper Input Validation vulnerability in Cisco Ironport web Security Appliance 7.5 Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks high complexity cisco CWE-20	6.4