Page 2 of 13 results (0.001 seconds)

CVSS: 9.0EPSS: 2%CPEs: 11EXPL: 0

CVE-2017-6746

https://notcve.org/view.php?id=CVE-2017-6746

25 Jul 2017 — A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10.0 and later for WSA on both virtual and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. • http://www.securityfocus.com/bid/99877 • CWE-20: Improper Input Validation •

CVSS: 7.2EPSS: 0%CPEs: 19EXPL: 0

CVE-2017-6748

https://notcve.org/view.php?id=CVE-2017-6748

25 Jul 2017 — A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. • http://www.securityfocus.com/bid/99918 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •

CVSS: 5.4EPSS: 0%CPEs: 18EXPL: 0

CVE-2017-6749

https://notcve.org/view.php?id=CVE-2017-6749

25 Jul 2017 — A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88865. Known Affected Releases: 10.1.0-204. Una vulnerabilidad en la interfaz de administración basada en web de Web Security Applian... • http://www.securityfocus.com/bid/99875 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •