Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:web_security_appliance:11.0.0-613:*:*:*:*:*:*:*

part: a version: 11.0.0-613 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductWeb Security Appliance (cb6f4728-4676-5648-ac81-aebc3aa4ad4f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-6748 vulnerable 2026-06-08 05:09:52.673224 Details available
A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-234.
Published: 2017-07-25T19:00:00.000Z
Updated: 2024-08-05T15:41:17.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6746 vulnerable 2026-06-08 05:09:52.661591 Details available
A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10.0 and later for WSA on both virtual and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-235.
Published: 2017-07-25T19:00:00.000Z
Updated: 2024-08-05T15:41:17.024Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.