|
Description
|
|
A vulnerability has been identified in Cisco Web Security Appliance.
A remote attacker can exploit it by inciting their victim to follow a specially crafted URL in order to execute arbitrary JavaScript / HTML code.
This vulnerability is due to insufficient validation of HTTP headers in the web framework.
|
|
|
|
|
|
Vulnerable Products
|
|
Vulnerable Software:
Web Security Appliance (Cisco) - 8.5 .0-497
|
|
|
|
|
|
Solution
|
|
No solution for the moment.
|
|
|
|
|
|
CVE
|
|
CVE-2015-4198
|
|
|
|
|
|
References
|
|
- CSCuu24409 : Cisco Web Security Appliance Web Framework HTTP Header Injection Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=39422
|
|
|
|
|
|
Vulnerability Manager Detection
|
|
No
|
|
|
|
|
|
IPS Protection
|
|
|
|
|
|
|
