cisco web security virtual appliance 10.5.1 vulnerabilities and exploits

(subscribe to this query)

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affect...

Cisco Web Security Virtual Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.5.1 Cisco Web Security Appliance 10.1.1-230 Cisco Web Security Appliance 10.5.0 Cisco Web Security Appliance 10.5.1-270 Cisco Web Security Virtual Appliance 10.1 Base Cisco Web Security Appliance 10.5.0-358 Cisco Web Security Appliance 10.1.1-235 Cisco Web Security Virtual Appliance 10.0.0 Cisco Web Security Virtual Appliance 10.5 Base Cisco Web Security Appliance 10.1.1-234 Cisco Web Security Appliance 10.0 Base Cisco Web Security Appliance 10.0.0-232 Cisco Web Security Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.1.1 Cisco Web Security Appliance 10.1.0-204 Cisco Web Security Appliance 10.0.0-233

A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local malicious user to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials....

Cisco Web Security Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.1.0 Cisco Web Security Virtual Appliance 11.0.0 Cisco Web Security Virtual Appliance 11.0 Base Cisco Web Security Appliance 10.0.0-233 Cisco Web Security Virtual Appliance 10.0.0 Cisco Web Security Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.5 Base Cisco Web Security Virtual Appliance 10.1.1 Cisco Web Security Virtual Appliance 10.5.1 Cisco Web Security Appliance 10.0.0-232 Cisco Web Security Virtual Appliance 10.1 Base Cisco Web Security Appliance 11.0.0-613 Cisco Web Security Appliance 10.1.1-230 Cisco Web Security Appliance 11.0.0 Cisco Web Security Appliance 10.5.0 Cisco Web Security Appliance 10.5.0-358 Cisco Web Security Appliance 10.1.0-204

A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local malicious user to log in to the device with the privileges of a limited user or an unauthenticated, remote malicious user to authenticate to certain areas of the web GUI, a...

Cisco Web Security Appliance 10.1.1-235 Cisco Web Security Appliance 10.5.0-358 Cisco Web Security Appliance 10.1.0-204 Cisco Web Security Appliance 10.1.1-234 Cisco Web Security Appliance 10.0.0-233 Cisco Web Security Appliance 10.1.1-230 Cisco Web Security Appliance 10.0.0-232 Cisco Web Security Virtual Appliance 10.0.0 Cisco Web Security Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.5.1 Cisco Web Security Virtual Appliance 10.5 Base Cisco Web Security Appliance 10.5.0 Cisco Web Security Appliance 10.0 Base Cisco Web Security Virtual Appliance 10.1.0 Cisco Web Security Virtual Appliance 10.1.1 Cisco Web Security Virtual Appliance 10.1 Base

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote malicious user to circumvent Layer 4 Traffic Monitor (L4TM) functionality and bypass security protections. The vulnerability is due to a change in the unde...

Cisco Web Security Appliance 11.5.0-fcs-442 Cisco Web Security Appliance 10.5.1-296 Cisco Web Security Appliance 10.5.1 Cisco Web Security Appliance 11.0.0 Cisco Web Security Appliance 10.5.2

A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: ...

Cisco Web Security Appliance 11.0.0 Cisco Web Security Appliance 10.5.0-358 Cisco Web Security Appliance 10.1.0-204 Cisco Web Security Appliance 10.1.1-234 Cisco Web Security Appliance 10.0 Base Cisco Web Security Appliance 10.1.0 Cisco Web Security Appliance 11.0.0-641 Cisco Web Security Appliance 10.5.0 Cisco Web Security Appliance 10.0.0-233 Cisco Web Security Appliance 11.0.0-613 Cisco Web Security Appliance 10.1.1-230

A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote malicious user to exhaust system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability exists ...

Cisco Web Security Appliance 10.5.2-042 Cisco Web Security Appliance 11.0.0-641 Cisco Web Security Appliance 9.1.1-074 Cisco Web Security Appliance 9.1.2-010 Cisco Web Security Appliance 10.1.1-235 Cisco Web Security Appliance 10.5.1-296 Cisco Web Security Appliance 9.1.2-022 Cisco Web Security Appliance 10.1.0-204 Cisco Web Security Appliance 10.5.1-270 Cisco Web Security Appliance 9.1.2-039

A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote malicious user to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incor...

Cisco Asyncos 10.5.1-296

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d

1 Article

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 prior to 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote malicious users to obt...

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d Nodejs Node.js Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook