cisco web security appliance 7.1.3 vulnerabilities and exploits

(subscribe to this query)

The proxy process on Cisco Web Security Appliance (WSA) devices up to and including 9.1.0-070 allows remote malicious users to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, ...

CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and previous versions allows remote malicious users to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002.

Cisco Web Security Virtual Appliance 7.1.0 Cisco Web Security Virtual Appliance 7.1.2 Cisco Web Security Virtual Appliance 7.1.4 Cisco Web Security Virtual Appliance 7.5.0 Cisco Web Security Virtual Appliance 7.1.1 Cisco Web Security Virtual Appliance Cisco Web Security Appliance -Cisco Web Security Virtual Appliance 7.5.1 Cisco Web Security Virtual Appliance 7.1.3

Cisco AsyncOS up to and including 9.5.0-444 on Web Security Appliance (WSA) devices allows remote malicious users to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious use...

Cisco Web Security Appliance 9.1.0-000 Cisco Email Security Appliance 9.9 Base Cisco Email Security Appliance 8.9.1-000 Cisco Web Security Appliance 7.1.0 Cisco Email Security Appliance 9.6.0-051 Cisco Email Security Appliance 9.7.1-066 Cisco Web Security Appliance 8.5.2-024 Cisco Web Security Appliance 9.5.0-235 Cisco Email Security Appliance 9.0.0 Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 8.5.0-000 Cisco Web Security Appliance 8.0.5 Hot Patch 1 Cisco Email Security Appliance 8.0 Base Cisco Web Security Appliance 7.1.2 Cisco Email Security Appliance 9.1.0-032 Cisco Web Security Appliance 8.5.2-027 Cisco Web Security Appliance 7.1.1 Cisco Web Security Appliance 8.8.0-085 Cisco Web Security Appliance 8.0.7-142 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 8.5.6-074

Memory leak in Cisco AsyncOS up to and including 8.8 on Web Security Appliance (WSA) devices allows remote malicious users to cause a denial of service (memory consumption) via an unspecified HTTP status code, aka Bug ID CSCur28305.

Cisco Web Security Appliance \\(wsa\\) 6.0.0-000 Cisco Web Security Appliance \\(wsa\\) 5.6.0-623 Cisco Web Security Appliance \\(wsa\\) 8.5.2-027 Cisco Web Security Appliance \\(wsa\\) 8.5.0-497 Cisco Web Security Appliance \\(wsa\\) 7.1.3 Cisco Web Security Appliance \\(wsa\\) 8.5.1-021 Cisco Web Security Appliance \\(wsa\\) 7.7.1-000 Cisco Web Security Appliance \\(wsa\\) 8.0.7-142 Cisco Web Security Appliance \\(wsa\\) 8.0.8-mr-113 Cisco Web Security Appliance \\(wsa\\) 8.0.5 Cisco Web Security Appliance \\(wsa\\) 8.0.0-000 Cisco Web Security Appliance \\(wsa\\) 7.1.0 Cisco Web Security Appliance \\(wsa\\) 7.5.2-000 Cisco Web Security Appliance \\(wsa\\) 7.5.0-825 Cisco Web Security Appliance \\(wsa\\) 8.0.6-078 Cisco Web Security Appliance \\(wsa\\) 8.0.7 Cisco Web Security Appliance \\(wsa\\) 7.5.1-000 Cisco Web Security Appliance \\(wsa\\) 7.1.4 Cisco Web Security Appliance \\(wsa\\) 7.1.2 Cisco Web Security Appliance \\(wsa\\) 7.1.1 Cisco Web Security Appliance \\(wsa\\) 8.5.3-055 Cisco Web Security Appliance \\(wsa\\) 8.0.6-119

Cisco AsyncOS prior to 8.5.3-069 and 8.6 up to and including 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation for HTTP requests, which allows remote malicious users to cause a denial of service (proxy-process reload) via a crafted request, aka Bug ID CSCuu...

Cisco Web Security Appliance \\(wsa\\) 6.0.0-000 Cisco Web Security Appliance \\(wsa\\) 5.6.0-623 Cisco Web Security Appliance \\(wsa\\) 8.5.0-497 Cisco Web Security Appliance \\(wsa\\) 8.5.0.000 Cisco Web Security Appliance \\(wsa\\) 7.1.2 Cisco Web Security Appliance \\(wsa\\) 7.1.1 Cisco Web Security Appliance \\(wsa\\) 8.5.3-055 Cisco Web Security Appliance \\(wsa\\) 8.0.6-119 Cisco Web Security Appliance \\(wsa\\) 8.5.2-024 Cisco Web Security Appliance \\(wsa\\) 8.0.6 Cisco Web Security Appliance \\(wsa\\) 8.0.5 Cisco Web Security Appliance \\(wsa\\) 7.7.0-000 Cisco Web Security Appliance \\(wsa\\) 7.5.0-000 Cisco Web Security Appliance \\(wsa\\) 8.5.1-021 Cisco Web Security Appliance \\(wsa\\) 7.7.1-000 Cisco Web Security Appliance \\(wsa\\) 8.0.7-142 Cisco Web Security Appliance \\(wsa\\) 8.0.8-mr-113 Cisco Web Security Appliance \\(wsa\\) 8.0.0-000 Cisco Web Security Appliance \\(wsa\\) 7.5.1-000 Cisco Web Security Appliance \\(wsa\\) 7.1.0 Cisco Web Security Appliance \\(wsa\\) 7.5.2-000 Cisco Web Security Appliance \\(wsa\\) 7.5.0-825

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices prior to 7.1.3-013, 7.5 prior to 7.5.0-838, and 7.7 prior to 7.7.0-550; Email Security Appliance devices prior to 7.1.5-104, 7.3 prior to 7.3.2-026, 7.5 prior to 7.5.2-203, and 7.6 prior to 7.6.3-019; a...

Cisco Ironport Asyncos Cisco Ironport Asyncos 7.2 Cisco Ironport Asyncos 7.8 Cisco Ironport Asyncos 7.9 Cisco Ironport Asyncos 7.3 Cisco Ironport Asyncos 7.7 Cisco Ironport Asyncos 7.5 Cisco Ironport Asyncos 7.6

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices prior to 7.1.3-013, 7.5 prior to 7.5.0-838, and 7.7 prior to 7.7.0-602; Email Security Appliance devices prior to 7.1.5-106 and 7.3, 7.5, and 7.6 prior to 7.6.3-019; and Content Se...

Cisco Ironport Asyncos 7.8 Cisco Ironport Asyncos 7.3 Cisco Ironport Asyncos 7.7 Cisco Ironport Asyncos Cisco Ironport Asyncos 7.5 Cisco Ironport Asyncos 7.2 Cisco Ironport Asyncos 7.6 Cisco Ironport Asyncos 7.9

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices prior to 7.1.3-013, 7.5 prior to 7.5.0-838, and 7.7 prior to 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID ...

Cisco Ironport Asyncos 7.7 Cisco Ironport Asyncos 7.5 Cisco Ironport Asyncos

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1154 Github repositories28 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook