Cisco

Web Security Appliance

54 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2018-0406

  • EPSS 0.17%
  • Veröffentlicht 01.08.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:09

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based (DOM-based) cross-site scripting (XSS) attack against a ...

6.1

CVE-2018-0366

  • EPSS 0.33%
  • Veröffentlicht 16.07.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:04

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface ...

7.5

CVE-2018-0353

  • EPSS 0.86%
  • Veröffentlicht 07.06.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:02

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor (L4TM) functionality and bypass security protections. The vulnerability is due...

6.1

CVE-2018-0093

  • EPSS 0.33%
  • Veröffentlicht 18.01.2018 06:29:00
  • Zuletzt bearbeitet 21.11.2024 03:37:30

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface ...

4.3

CVE-2017-6783

  • EPSS 0.28%
  • Veröffentlicht 17.08.2017 20:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to discover confidential information about the a...

7.5

CVE-2017-6750

  • EPSS 0.75%
  • Veröffentlicht 25.07.2017 19:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas...

7.5

CVE-2017-6751

  • EPSS 0.47%
  • Veröffentlicht 25.07.2017 19:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface ...

5.4

CVE-2017-6749

  • EPSS 0.24%
  • Veröffentlicht 25.07.2017 19:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an...

7.2

CVE-2017-6748

  • EPSS 0.32%
  • Veröffentlicht 25.07.2017 19:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administ...

9

CVE-2017-6746

  • EPSS 2.51%
  • Veröffentlicht 25.07.2017 19:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credenti...