Unscored CVE-2015-0698 EUVD-2015-0711GHSA-297g-9658-43jh

Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices…

Published Apr 15, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut39213.

References

1032135 vdb-entry
20150414 Cisco Web Security Appliance Cross-Site Scripting Vulnerability vendor-advisory