CVE-2016-9202

Cisco ESA/ASA web UI is affected by a persistent cross-site scripting (XSS) vulnerability (CVE-2016-9202) in the web-based management interface, exploitable by an unauthenticated remote attacker. The flaw could allow script execution in a user’s browser on ESA Switches and related appliances, wit...