CVE-2015-0738

MEDIUM · 4.3 CVSS Gepubliceerd: 17-05-2015 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security Appliance (WSA) devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008.

Vendors

Cisco

Affected products

Web Security Appliance

References

tools.cisco.com
www.securitytracker.com