cisco web security virtual appliance 10.0.0 vulnerabilities and exploits

(subscribe to this query)

A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local malicious user to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials....

Cisco Web Security Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.1.0 Cisco Web Security Virtual Appliance 11.0.0 Cisco Web Security Virtual Appliance 11.0 Base Cisco Web Security Appliance 10.0.0-233 Cisco Web Security Virtual Appliance 10.0.0 Cisco Web Security Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.5 Base Cisco Web Security Virtual Appliance 10.1.1 Cisco Web Security Virtual Appliance 10.5.1 Cisco Web Security Appliance 10.0.0-232 Cisco Web Security Virtual Appliance 10.1 Base Cisco Web Security Appliance 11.0.0-613 Cisco Web Security Appliance 10.1.1-230 Cisco Web Security Appliance 11.0.0 Cisco Web Security Appliance 10.5.0 Cisco Web Security Appliance 10.5.0-358 Cisco Web Security Appliance 10.1.0-204

A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local malicious user to log in to the device with the privileges of a limited user or an unauthenticated, remote malicious user to authenticate to certain areas of the web GUI, a...

Cisco Web Security Appliance 10.1.1-235 Cisco Web Security Appliance 10.5.0-358 Cisco Web Security Appliance 10.1.0-204 Cisco Web Security Appliance 10.1.1-234 Cisco Web Security Appliance 10.0.0-233 Cisco Web Security Appliance 10.1.1-230 Cisco Web Security Appliance 10.0.0-232 Cisco Web Security Virtual Appliance 10.0.0 Cisco Web Security Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.5.1 Cisco Web Security Virtual Appliance 10.5 Base Cisco Web Security Appliance 10.5.0 Cisco Web Security Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.1.1 Cisco Web Security Virtual Appliance 10.1 Base

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote malicious user to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, a...

Cisco Web Security Appliance 9.0.0-162 Cisco Web Security Appliance 9.0.0-193 Cisco Web Security Appliance 9.0.0-485 Cisco Web Security Appliance 10.0.0-232 Cisco Web Security Appliance 10.0.0-233 Cisco Web Security Appliance 10.1.0-204 Cisco Web Security Virtual Appliance 9.0.0 Cisco Web Security Virtual Appliance 10.0.0 Cisco Web Security Virtual Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.1.1

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affect...

Cisco Web Security Virtual Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.5.1 Cisco Web Security Appliance 10.1.1-230 Cisco Web Security Appliance 10.5.0 Cisco Web Security Appliance 10.5.1-270 Cisco Web Security Virtual Appliance 10.1 Base Cisco Web Security Appliance 10.5.0-358 Cisco Web Security Appliance 10.1.1-235 Cisco Web Security Virtual Appliance 10.0.0 Cisco Web Security Virtual Appliance 10.5 Base Cisco Web Security Appliance 10.1.1-234 Cisco Web Security Appliance 10.0 Base Cisco Web Security Appliance 10.0.0-232 Cisco Web Security Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.1.1 Cisco Web Security Appliance 10.1.0-204 Cisco Web Security Appliance 10.0.0-233

A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious user to bypass configured user filters on the device....

Cisco Web Security Appliance 10.0.0-082 Cisco Web Security Appliance 10.0.0-125 Cisco Email Security Appliance Firmware 9.9.6-026 Cisco Email Security Appliance Firmware 10.0.0-082 Cisco Web Security Appliance 10.0.0-124 Cisco Email Security Appliance Firmware 10.0.0-232 Cisco Email Security Appliance Firmware 9.9.9-894 Cisco Email Security Appliance Firmware 10.0.0-203 Cisco Web Security Appliance 10.0.0-232 Cisco Web Security Appliance 10.0.0-203 Cisco Email Security Appliance Firmware 10.0.0-125 Cisco Email Security Appliance Firmware 10.0.0-124

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious use...

Cisco Web Security Appliance 9.1.0-000 Cisco Email Security Appliance 9.9 Base Cisco Email Security Appliance 8.9.1-000 Cisco Web Security Appliance 7.1.0 Cisco Email Security Appliance 9.6.0-051 Cisco Email Security Appliance 9.7.1-066 Cisco Web Security Appliance 8.5.2-024 Cisco Web Security Appliance 9.5.0-235 Cisco Email Security Appliance 9.0.0 Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 8.5.0-000 Cisco Web Security Appliance 8.0.5 Hot Patch 1 Cisco Email Security Appliance 8.0 Base Cisco Web Security Appliance 7.1.2 Cisco Email Security Appliance 9.1.0-032 Cisco Web Security Appliance 8.5.2-027 Cisco Web Security Appliance 7.1.1 Cisco Web Security Appliance 8.8.0-085 Cisco Web Security Appliance 8.0.7-142 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 8.5.6-074

A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances and Cisco Web Security Appliances could allow an unauthenticated, remote malicious user to bypass user filters that are configured for an affected device. Affected...

Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 10.0.0-232 Cisco Email Security Appliance 9.7.2-047 Cisco Email Security Appliance 10.0.0-125

A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: ...

Cisco Web Security Appliance 11.0.0 Cisco Web Security Appliance 10.5.0-358 Cisco Web Security Appliance 10.1.0-204 Cisco Web Security Appliance 10.1.1-234 Cisco Web Security Appliance 10.0 Base Cisco Web Security Appliance 10.1.0 Cisco Web Security Appliance 11.0.0-641 Cisco Web Security Appliance 10.5.0 Cisco Web Security Appliance 10.0.0-233 Cisco Web Security Appliance 11.0.0-613 Cisco Web Security Appliance 10.1.1-230

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d

1 Article

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 prior to 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote malicious users to obt...

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d Nodejs Node.js Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook