CVE-2015-4198

Cross-site scripting (XSS) vulnerability in the web framework on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409.
References
Link Resource
http://tools.cisco.com/security/center/viewAlert.x?alertId=39422 Vendor Advisory
http://www.securityfocus.com/bid/75326 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032676 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:o:cisco:web_security_appliance:8.5.0-497:*:*:*:*:*:*:*

Information

Published : 2015-06-20 07:59

Updated : 2016-12-28 10:01


NVD link : CVE-2015-4198

Mitre link : CVE-2015-4198


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

cisco

  • web_security_appliance