Cisco

Web Security Appliance

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2018-0428

  • EPSS 0.13%
  • Veröffentlicht 15.08.2018 20:29:01
  • Zuletzt bearbeitet 21.11.2024 03:38:12

A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate with valid administrator credentials. The vulnerabili...

4.3

CVE-2015-0624

Exploit
  • EPSS 0.15%
  • Veröffentlicht 21.02.2015 11:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412...

5

CVE-2015-0628

  • EPSS 0.18%
  • Veröffentlicht 20.02.2015 02:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass intended proxying restrictions via a malformed HTTP method, aka Bug ID CSCus79174.

4.3

CVE-2015-0623

  • EPSS 0.26%
  • Veröffentlicht 19.02.2015 00:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Administrator report page on Cisco Web Security Appliance (WSA) devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus40627.

4.3

CVE-2014-3289

Exploit
  • EPSS 0.66%
  • Veröffentlicht 10.06.2014 11:19:35
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 an...

4.3

CVE-2014-2137

  • EPSS 0.21%
  • Veröffentlicht 02.04.2014 03:58:17
  • Zuletzt bearbeitet 12.04.2025 10:46:40

CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002.

7.8

CVE-2013-5537

  • EPSS 0.39%
  • Veröffentlicht 24.10.2013 10:53:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a d...

6.8

CVE-2013-3395

  • EPSS 0.12%
  • Veröffentlicht 02.07.2013 03:43:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hi...