Description
Cross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security Appliance (WSA) devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008.
References
- 20150515 Cisco Web Security Appliance Web Tracking Report Page Cross-Site Scripting Vulnerability vendor-advisory
- 1032349 vdb-entry