Unscored CVE-2015-4198 EUVD-2015-4221GHSA-v5x3-2xr4-f8xj

Cross-site scripting (XSS) vulnerability in the web framework on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allows …

Published Jun 20, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the web framework on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409.

References

20150619 Cisco Web Security Appliance Web Framework HTTP Header Injection Vulnerability vendor-advisory
75326 vdb-entry
1032676 vdb-entry