Unrated severityNVD Advisory· Published Apr 2, 2014· Updated Jun 17, 2026
CVE-2014-2137
CVE-2014-2137
Description
CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:cisco:web_security_virtual_appliance:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:cisco:web_security_virtual_appliance:*:*:*:*:*:*:*:*range: <=7.7
- cpe:2.3:a:cisco:web_security_virtual_appliance:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:7.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:7.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:7.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:7.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:7.5.1:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:web_security_appliance:-:*:*:*:*:*:*:*
- (no CPE)range: <=7.7
Patches
Vulnerability mechanics
References
2- tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2137nvdVendor Advisory
- tools.cisco.com/security/center/viewAlert.xnvdVendor Advisory
News mentions
0No linked articles in our index yet.