Cross site scripting

2017-07-2519:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

34.7%

JSON

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88865. Known Affected Releases: 10.1.0-204.

CPENameOperatorVersion
web_security_applianceeq10.1.1-234
web_security_applianceeq10.5.0
web_security_applianceeq10.1.0-204
web_security_applianceeq10.5.1-270
web_security_applianceeq10.0.0-232
web_security_applianceeq10.1.0
web_security_applianceeq10.1.1-235
web_security_applianceeq10.1.1-230
web_security_applianceeq10.5.0-358
web_security_applianceeq10.0.0-233

Name	Operator	Version
web_security_appliance	eq	10.1.1-234
web_security_appliance	eq	10.5.0
web_security_appliance	eq	10.1.0-204
web_security_appliance	eq	10.5.1-270
web_security_appliance	eq	10.0.0-232
web_security_appliance	eq	10.1.0
web_security_appliance	eq	10.1.1-235
web_security_appliance	eq	10.1.1-230
web_security_appliance	eq	10.5.0-358
web_security_appliance	eq	10.0.0-233