Lucene search

CiscoCVE-2015-0577

HistoryJan 14, 2015 - 7:59 p.m.

CVE-2015-0577

2015-01-1419:59:01

CWE-79

cisco

web.nvd.nist.gov

cve-2015-0577

xss

cisco asyncos

ironport spam quarantine

cisco email security appliance

content security management appliance

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA), allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCus22925 and CSCup08113.

Affected configurations

Nvd

Node

ciscoasyncosMatch-

VendorProductVersionCPE
ciscoasyncos-cpe:2.3:o:cisco:asyncos:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	asyncos	-	cpe:2.3:o:cisco:asyncos:-:::::::*

References

secunia.com/advisories/62289

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0577

www.securityfocus.com/bid/72056

www.securitytracker.com/id/1031544

exchange.xforce.ibmcloud.com/vulnerabilities/100556

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Related for CVE-2015-0577