CVE-2017-6748

Cisco Web Security Appliance (WSA) CLI parser vulnerability CVE-2017-6748 enables an authenticated, local attacker with operator/administrator credentials to inject commands and elevate to root. Affected: virtual and hardware WSA platforms. Root cause: insufficient validation in the CLI parser al...

CVE-2018-0406

Cisco Web Security Appliance (WSA) web-based management interface suffers a reflected/DOM-based XSS due to insufficient input validation. An unauthenticated, remote attacker could lure a user into clicking a crafted link, enabling arbitrary script execution in the interface context or leakage of ...

CVE-2013-5537

The CVE-2013-5537 issue affects Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA). The web framework does not properly manage HTTP/HTTPS session state, allowing an unauthenticated remote attacker to cause a denial of service (manag...

CVE-2015-4198

Cisco Web Security Appliance (WSA) WEB FRAMEWORK HTTP HEADER INJECTION: An unauthenticated remote attacker could craft an HTTP header to inject arbitrary HTML/script into the browser via the WSA web interface. Root cause: insufficient validation of header value used in responses. Affected product...

CVE-2016-1380

CVE-2016-1380 affects Cisco AsyncOS on Web Security Appliance (WSA): Software versions 8.0 before 8.0.6-119 are vulnerable to a denial of service via a crafted HTTP POST request that causes the proxy process to hang. Exploitation requires no authentication and is remote. The issue stems from impr...

CVE-2016-6360

Cisco CVE-2016-6360 affects Cisco AsyncOS (ESA) and Web Security Appliance (WSA) via the AMP component. The root cause is improper validation of Java Archive (JAR) content scanned when AMP is enabled, which can cause the AMP process to restart unexpectedly and produce a partial DoS. Affected prod...

CVE-2014-3289

CVE-2014-3289 is a reflected XSS vulnerability in Cisco AsyncOS used by ESA, WSA, and SMA. The issue stems from insufficient input validation of the date_range parameter on the web management interface (notably monitor/reports/overview). A remote attacker can inject arbitrary script by tricking a...

CVE-2016-6469

CVE-2016-6469 describes an HTTP URL parsing vulnerability in Cisco AsyncOS for Cisco Web Security Appliance (WSA) that could allow an unauthenticated, remote attacker to cause a DoS by triggering an unexpected restart of the proxy process. Affected releases include 9.0.1-162 and 9.1.1-074. Fixed ...

CVE-2017-3827

CVE-2017-3827 affects Cisco AsyncOS MIME scanner in Cisco ESA/WSA. A remote, unauthenticated attacker can bypass configured user filters due to improper handling of malformed MIME headers, enabling bypass of filter protections on affected devices. Affected releases include Cisco ESA/WSA versions ...

CVE-2016-1381

CVE-2016-1381 concerns Cisco AsyncOS on Web Security Appliance (WSA) versions 8.5–9.0 before 9.0.1-162. The issue is a memory leak in the cached file-range request path: an unauthenticated, remote attacker can open multiple connections that request file ranges from cached content, causing memory ...

CVE-2018-0093

CVE-2018-0093 affects Cisco Web Security Appliance (WSA) and is a reflected XSS in the web-based management interface caused by insufficient input validation. An unauthenticated, remote attacker could lure a user to click a crafted link, enabling execution of script code in the interface context ...

CVE-2014-2137

Cisco Web Security Appliance (WSA) 7.x and 8.x are affected by a CRLF injection vulnerability in the web framework. The root cause is insufficient validation of input used as HTTP header values, allowing remote attackers to inject arbitrary headers and perform redirection attacks via crafted URLs...

CVE-2015-0698

CVE-2015-0698 affects Cisco Web Security Appliance (WSA) admin web pages with software 8.5.0-497, via multiple XSS in filter search forms. Root cause: insufficient input validation in the filter/search form handling. Impact: remote attackers can inject arbitrary scripts via a crafted URL without ...

CVE-2016-1296

The CVE-2016-1296 entry concerns Cisco Web Security Appliance (WSA) proxy engine that, on affected software versions 8.5.3-055, 9.1.0-000, and 9.5.0-235, could be bypassed by a remote attacker through a malformed HTTP method, enabling an unauthenticated bypass of proxy restrictions. Root cause is...

CVE-2015-0692

Cisco Web Security Appliance (WSA) devices running software 8.5.0-ise-147 are affected by CVE-2015-0692 due to improper restriction of the pickle module during certain tunnel-status checks. The vulnerability allows an authenticated, local attacker to execute arbitrary Python code and gain privile...