CVE-2014-3289

CVE-2014-3289 is a reflected XSS vulnerability in Cisco AsyncOS used by ESA, WSA, and SMA. The issue stems from insufficient input validation of the date_range parameter on the web management interface (notably monitor/reports/overview). A remote attacker can inject arbitrary script by tricking a...

CVE-2015-4198

Cisco Web Security Appliance (WSA) WEB FRAMEWORK HTTP HEADER INJECTION: An unauthenticated remote attacker could craft an HTTP header to inject arbitrary HTML/script into the browser via the WSA web interface. Root cause: insufficient validation of header value used in responses. Affected product...

CVE-2015-6298

The CVE-2015-6298 issue concerns Cisco AsyncOS for Web Security Appliance (WSA) and Cisco Web Security Appliance admin web interface. Affected AsyncOS versions include 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085. The root...

CVE-2016-1288

CVE-2016-1288 affects Cisco Web Security Appliance (WSA) via the HTTPS Proxy/HTTPS packet handling. Cisco AsyncOS prior to 8.5.3-051 and 9.x prior to 9.0.0-485 are vulnerable to a DoS when an unauthenticated remote attacker sends a malformed HTTPS request, causing service outages. The issue stems...

CVE-2016-1380

CVE-2016-1380 affects Cisco AsyncOS on Web Security Appliance (WSA): Software versions 8.0 before 8.0.6-119 are vulnerable to a denial of service via a crafted HTTP POST request that causes the proxy process to hang. Exploitation requires no authentication and is remote. The issue stems from impr...

CVE-2017-3827

CVE-2017-3827 affects Cisco AsyncOS MIME scanner in Cisco ESA/WSA. A remote, unauthenticated attacker can bypass configured user filters due to improper handling of malformed MIME headers, enabling bypass of filter protections on affected devices. Affected releases include Cisco ESA/WSA versions ...

CVE-2016-6407

CVE-2016-6407 affects Cisco Web Security Appliance AsyncOS prior to 9.5.0-444. The issue is a denial-of-service condition caused by the device processing many overlapping HTTP byte-range requests, leading to link saturation. A remote attacker can trigger the DoS without authentication by issuing ...

CVE-2016-6469

CVE-2016-6469 describes an HTTP URL parsing vulnerability in Cisco AsyncOS for Cisco Web Security Appliance (WSA) that could allow an unauthenticated, remote attacker to cause a DoS by triggering an unexpected restart of the proxy process. Affected releases include 9.0.1-162 and 9.1.1-074. Fixed ...

CVE-2018-0406

Cisco Web Security Appliance (WSA) web-based management interface suffers a reflected/DOM-based XSS due to insufficient input validation. An unauthenticated, remote attacker could lure a user into clicking a crafted link, enabling arbitrary script execution in the interface context or leakage of ...

CVE-2018-0093

CVE-2018-0093 affects Cisco Web Security Appliance (WSA) and is a reflected XSS in the web-based management interface caused by insufficient input validation. An unauthenticated, remote attacker could lure a user to click a crafted link, enabling execution of script code in the interface context ...

CVE-2014-2137

Cisco Web Security Appliance (WSA) 7.x and 8.x are affected by a CRLF injection vulnerability in the web framework. The root cause is insufficient validation of input used as HTTP header values, allowing remote attackers to inject arbitrary headers and perform redirection attacks via crafted URLs...

CVE-2015-0698

CVE-2015-0698 affects Cisco Web Security Appliance (WSA) admin web pages with software 8.5.0-497, via multiple XSS in filter search forms. Root cause: insufficient input validation in the filter/search form handling. Impact: remote attackers can inject arbitrary scripts via a crafted URL without ...

CVE-2015-0692

Cisco Web Security Appliance (WSA) devices running software 8.5.0-ise-147 are affected by CVE-2015-0692 due to improper restriction of the pickle module during certain tunnel-status checks. The vulnerability allows an authenticated, local attacker to execute arbitrary Python code and gain privile...

CVE-2016-1381

CVE-2016-1381 concerns Cisco AsyncOS on Web Security Appliance (WSA) versions 8.5–9.0 before 9.0.1-162. The issue is a memory leak in the cached file-range request path: an unauthenticated, remote attacker can open multiple connections that request file ranges from cached content, causing memory ...

CVE-2016-1296

The CVE-2016-1296 entry concerns Cisco Web Security Appliance (WSA) proxy engine that, on affected software versions 8.5.3-055, 9.1.0-000, and 9.5.0-235, could be bypassed by a remote attacker through a malformed HTTP method, enabling an unauthenticated bypass of proxy restrictions. Root cause is...