Code injection

Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks...

Design/Logic Flaw

Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks...

CVE-2012-1326

Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks...

Code injection

Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks...

CVE-2012-1316

Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks...

CVE-2012-1316

CVE-2012-1316 affects the Cisco IronPort Web Security Appliance, where the product does not check for certificate revocation, potentially enabling MITM attacks. The linked sources show an impact on integrity (CVSS3.1: HIGH) with network exposure (CVSS3.1: AV:N, AC:H, PR:N, UI:N, S:U) and a CVSSv2...

CVE-2012-0334

Cisco IronPort Web Security Appliance AsyncOS before 7.5 contains a SSL certificate caching flaw in its insecure SSL/TLS handling, enabling unauthenticated, remote attackers on adjacent networks to perform MITM by injecting forged certificates. The vulnerability stems from improper validation of ...

CVE-2012-1326: Improper Input Validation

Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks...

PT-2020-7185

Name of the Vulnerable Software and Affected Versions Cisco IronPort Web Security Appliance versions up to and including 7.5 Description The issue concerns the failure to validate the basic constraints of the certificate authority, which could lead to man-in-the-middle MITM attacks. Recommendatio...

PT-2020-7184

Name of the Vulnerable Software and Affected Versions Cisco IronPort Web Security Appliance affected versions not specified Description The issue is related to the Cisco IronPort Web Security Appliance not checking for certificate revocation, which could lead to man-in-the-middle MITM attacks...

CVE-2012-1316: Improper Certificate Validation

Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks...

CVE-2012-0334: Improper Input Validation

Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks...

OSIsoft PI Vision Cross-Site Scripting Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. A cross-site scripting vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to cause the...

PT-2020-7164

Name of the Vulnerable Software and Affected Versions Cisco IronPort Web Security Appliance AsyncOS software versions prior to 7.5 Description The issue is related to a SSL Certificate Caching vulnerability, which could allow man-in-the-middle attacks. Recommendations For versions prior to 7.5,...

Google to Nix Chrome Support for Third-Party Cookies by 2022

Google has set an aggressive two-year deadline for dropping support for third-party tracking cookies in its Chrome web browser. Tracking cookies, which allow advertisers to virtually follow people around the web, are used for ad targeting. The move follows a number of privacy hardening steps by...

jenkins: Stored XSS vulnerability in expandable textbox form control

In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents typically Job/Configure...

Oracle Java SE/Java SE Embedded CVE-2020-2583 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Serialization' component. This vulnerability affects the following supported versions: Java SE: 7u241, 8u231, 11.0.5,...

Adobe Experience Manager APSB20-01 Multiple Cross Site Scripting Vulnerabilities

Description Adobe Experience Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...

Oracle Java SE/Java SE Embedded CVE-2020-2593 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Networking' component. This vulnerability affects the following supported versions: Java SE: 7u241, 8u231, 11.0.5,...

Webshell Bypass Vulnerability in Web Security Dog (Apache Edition) (CNVD-2020-12884)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition has a webshell bypass vulnerability. Attackers can use the vulnerability to bypass Web...