NetSight
IP …
medium5.4

CVE-2017-6749

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored c…

Impact

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88865. Known Affected Releases: 10.1.0-204.

Affected products

VendorProductAffected versions
CiscoWeb Security Appliance
Versions 10.0.0-232, 10.0.0-233, 10.0_base, 10.1.0, 10.1.0-204, 10.1.1-230
CiscoWeb Security Virtual Appliance
Versions 10.0.0, 10.0_base, 10.1.0, 10.1.1, 10.1_base, 10.5.1

Weakness classification

CWE-79

References