CVE-2017-6746

The CVE-2017-6746 entry describes a command-injection and root-privilege escalation vulnerability in the web interface of Cisco Web Security Appliance (WSA) running Cisco AsyncOS. Impact requires an authenticated administrator, and the flaw allows remote command execution with root privileges via...

CVE-2017-6749

CVE-2017-6749 describes a stored cross-site scripting (XSS) vulnerability in the Cisco Web Security Appliance (WSA) web-based management interface. An authenticated, remote attacker can exploit this by convincing a user to follow a crafted link, triggering script execution in the user’s browser s...

CVE-2017-6751

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypa...

CVE-2017-6750

A vulnerability in AsyncOS for the Cisco Web Security Appliance WSA could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials...

CVE-2017-6751

Cisco Web Security Appliance (WSA) is affected (virtual and hardware). The issue is a web proxy bypass where traffic forwarded from the web proxy interface to the administrative management interface is not denied, enabling an unauthenticated remote attacker to reach the admin interface (Access Co...

CVE-2017-6749

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

CVE-2017-6748

A vulnerability in the CLI parser of the Cisco Web Security Appliance WSA could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtu...

CVE-2017-6746

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

Cross site scripting

Cross-site scripting XSS vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2015-0674

Cross-site scripting XSS vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2015-0674

CVE-2015-0674 is an XSS vulnerability in Cisco Cloud Web Security’s Alert Service (base revision). The issue arises from insufficient input validation, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters. The connected documents confirm Cisco Cloud Web Secu...

Threat Outbreak Alert RuleID29960: Email Messages Distributing Malicious Software on July 25, 2017

Medium Alert ID: 54581 First Published: 2017 July 25 17:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29960 may contain the following files: Name | Siz...

CVE-2017-11617

CVE-2017-11617 describes a Cross-site Scripting (XSS) vulnerability in atmail prior to version 7.8.0.2. An attacker can inject arbitrary web script or HTML into the body of an email by manipulating an IMG element that contains both single and double quotes, enabling remote code execution in the c...

Threat Outbreak Alert RuleID29847: Email Messages Distributing Malicious Software on July 24, 2017

Medium Alert ID: 54574 First Published: 2017 July 24 17:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29847 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29925: Email Messages Distributing Malicious Software on July 24, 2017

Medium Alert ID: 54573 First Published: 2017 July 24 16:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29925 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29924: Email Messages Distributing Malicious Software on July 24, 2017

Medium Alert ID: 54572 First Published: 2017 July 24 16:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29924 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29923: Email Messages Distributing Malicious Software on July 24, 2017

Medium Alert ID: 54571 First Published: 2017 July 24 16:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29923 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29911: Email Messages Distributing Malicious Software on July 24, 2017

Medium Alert ID: 54570 First Published: 2017 July 24 16:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29911 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29910: Email Messages Distributing Malicious Software on July 24, 2017

Medium Alert ID: 54569 First Published: 2017 July 24 16:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29910 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29908: Email Messages Distributing Malicious Software on July 24, 2017

Medium Alert ID: 54568 First Published: 2017 July 24 16:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29908 may contain the following files: Name | Siz...