VYPR
Get started
← All advisories
Medium severity5.4NVD Advisory· Published Jul 25, 2017· Updated May 13, 2026

CVE-2017-6749

CVE-2017-6749

Description

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88865. Known Affected Releases: 10.1.0-204.

Affected products

18
  • Cisco Systems, Inc./Web Security Appliance11 versions
    cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.0_base:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.1.1-230:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.1.1-234:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.1.1-235:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.5.0-358:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.5.1-270:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Web Security Virtual Appliance7 versions
    cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.0_base:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.1_base:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.5_base:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.