Lucene search
K

6 matches found

ATTACKERKB
ATTACKERKB
added 2022/04/06 11:0 p.m.2 views

CVE-2022-20784

A vulnerability in the Web-Based Reputation Score WBRS engine of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to...

5.8CVSS6AI score0.00527EPSS
Exploits0References2
OSV
OSV
added 2022/04/06 6:15 p.m.1 views

CVE-2022-20784

A vulnerability in the Web-Based Reputation Score WBRS engine of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to...

5.3CVSS5.7AI score0.00527EPSS
Exploits0References1
Prion
Prion
added 2022/04/06 6:15 p.m.14 views

Cross site request forgery (csrf)

A vulnerability in the Web-Based Reputation Score WBRS engine of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to...

5CVSS5.4AI score0.00527EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/04/06 6:11 p.m.122 views

CVE-2022-20784

CVE-2022-20784 is a Cisco Web Security Appliance (WSA) filter-bypass vulnerability in the WBRS engine of Cisco AsyncOS. The issue stems from incorrect handling of certain URL character combinations, allowing an unauthenticated, remote attacker to bypass web request policies and access content blo...

5.8CVSS5.5AI score0.00527EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/06 6:11 p.m.7 views

CVE-2022-20784 Cisco Web Security Appliance Filter Bypass Vulnerability

A vulnerability in the Web-Based Reputation Score WBRS engine of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to...

5.8CVSS7AI score0.00527EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/04/06 12:0 a.m.1 views

Cisco Web Security Appliance 输入验证错误漏洞

The Cisco Web Security Appliance WSA is a web security appliance from Cisco USA. The appliance provides SaaS-based access control, real-time web reporting and tracking, and development of security policies. The Cisco Web Security Appliance WSA suffers from an input validation error vulnerability...

5.8CVSS5.8AI score0.00527EPSS
Exploits0References4
Rows per page
Query Builder