153 matches found
CVE-2016-1296
The proxy engine on Cisco Web Security Appliance WSA devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848...
Design/Logic Flaw
The proxy engine on Cisco Web Security Appliance WSA devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848...
CVE-2016-1296
The CVE-2016-1296 entry concerns Cisco Web Security Appliance (WSA) proxy engine that, on affected software versions 8.5.3-055, 9.1.0-000, and 9.5.0-235, could be bypassed by a remote attacker through a malformed HTTP method, enabling an unauthenticated bypass of proxy restrictions. Root cause is...
CVE-2015-6386
The Cisco Web Security Appliance (WSA) passthrough FTP feature is affected. A vulnerability in WSA software versions 8.0.7-142 and 8.5.1-021 can allow an unauthenticated, remote attacker to cause a denial of service via FTP sessions where the control connection is closed after data transfer (Bug ...
Cisco Web Security Appliance Native FTP Denial of Service Vulnerability
A vulnerability in the native passthrough FTP functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to high CPU utilization. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions migh...
Cisco Web Security Appliance Native FTP Denial of Service Vulnerability
A vulnerability in the native passthrough FTP functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to high CPU utilization. The vulnerability occurs when the FTP client terminates the FTP contr...
CVE-2015-6298
The CVE-2015-6298 issue concerns Cisco AsyncOS for Web Security Appliance (WSA) and Cisco Web Security Appliance admin web interface. Affected AsyncOS versions include 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085. The root...
CVE-2015-6293
Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via multiple file-range requests, aka Bug ID CSCur391...
CVE-2015-6321
Cisco AsyncOS contains a denial-of-service vulnerability (CVE-2015-6321) in the network stack triggered by a flood of TCP packets, leading to memory exhaustion and disruption of new TCP connections. Affected products include Cisco Email Security Appliance (ESA) on various 8.5.x–9.6.x branches, Ci...
CVE-2015-6287
Cisco Web Security Appliance WSA 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service service outage via a flood of TCP traffic that leads to DNS resolution delays, aka Bug IDs CSCur32005 and CSCur07907...
Code injection
Cisco Web Security Appliance WSA 8.0.7 allows remote HTTP servers to cause a denial of service memory consumption from stale TCP connections via crafted responses, aka Bug ID CSCuw10426...
CVE-2015-6287
Cisco Web Security Appliance (WSA) versions 8.0.6-078 and 8.0.6-115 are affected by CVE-2015-6287. A vulnerability in the DNS resolution function allows an unauthenticated, remote attacker to cause a partial DoS (service outage) by sending a flood of TCP proxy traffic that leads to DNS resolution...
CVE-2015-6287
Cisco Web Security Appliance WSA 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service service outage via a flood of TCP traffic that leads to DNS resolution delays, aka Bug IDs CSCur32005 and CSCur07907...
CVE-2015-6290
Cisco Web Security Appliance (WSA) version 8.0.7 contains a vulnerability (CVE-2015-6290) where an unauthenticated remote attacker can cause a denial-of-service by sending crafted HTTP responses. The root cause is improper handling of malformed HTTP server responses, leading to memory/resource ex...
Cisco Web Security Appliance Malformed HTTP Response Denial of Service Vulnerability
A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to memory management failures during processing of TCP connections. The vulnerability is due to the improper handling...
Cisco Web Security Appliance DNS Resolution Vulnerability
Cisco Web Security Appliance contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Cisco Web Security Appliance Web Interface Detection
This script performs HTTP based detection of Cisco Web Security Appliance Web Interface. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...
CVE-2015-4288
The LDAP implementation on the Cisco Web Security Appliance WSA 8.5.0-000, Email Security Appliance ESA 8.5.7-042, and Content Security Management Appliance SMA 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain...
CVE-2015-0732
Summary: CVE-2015-0732 is a cross-site scripting (XSS) vulnerability affecting Cisco AsyncOS on Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033. The issue arises from insuf...
