CVE-2015-0738

Cisco Web Security Appliance (WSA) Web Tracking Report page (version 8.5.0-497) contains a cross-site scripting (XSS) vulnerability due to improper validation of user-supplied input on a field. An unauthenticated, remote attacker could inject arbitrary script in the vulnerable page, potentially a...