Cisco Web Security Appliance (WSA) 10.0.0-233
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*
part: a version: 10.0.0-233 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Web Security Appliance (cb6f4728-4676-5648-ac81-aebc3aa4ad4f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-6751 |
vulnerable | 2026-06-08 05:09:52.694627 |
Details available
A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypass Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88863. Known Affected Releases: 10.1.0-204 9.0.0-485.
Published: 2017-07-25T19:00:00.000Z
Updated: 2024-08-05T15:41:17.674Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6750 |
vulnerable | 2026-06-08 05:09:52.688221 |
Details available
A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCve06124. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270.
Published: 2017-07-25T19:00:00.000Z
Updated: 2024-08-05T15:41:17.233Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6749 |
vulnerable | 2026-06-08 05:09:52.684106 |
Details available
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88865. Known Affected Releases: 10.1.0-204.
Published: 2017-07-25T19:00:00.000Z
Updated: 2024-08-05T15:41:17.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6748 |
vulnerable | 2026-06-08 05:09:52.673018 |
Details available
A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-234.
Published: 2017-07-25T19:00:00.000Z
Updated: 2024-08-05T15:41:17.140Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6746 |
vulnerable | 2026-06-08 05:09:52.655801 |
Details available
A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10.0 and later for WSA on both virtual and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-235.
Published: 2017-07-25T19:00:00.000Z
Updated: 2024-08-05T15:41:17.024Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.