CVE-2015-0623: XSS
Published Feb 19, 2015
·Updated
Cross-site scripting (XSS) vulnerability in the Administrator report page on Cisco Web Security Appliance (WSA) devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus40627.
Affected Software
1 affected component
Cisco Web Security Appliance
Event History
Feb 19, 2015
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0623?
CVE-2015-0623 is classified as a medium severity vulnerability.
2
How do I fix CVE-2015-0623?
To fix CVE-2015-0623, update your Cisco Web Security Appliance to the latest software version as recommended by Cisco.
3
What type of vulnerability is CVE-2015-0623?
CVE-2015-0623 is a cross-site scripting (XSS) vulnerability.
4
What devices are affected by CVE-2015-0623?
CVE-2015-0623 affects Cisco Web Security Appliance (WSA) devices.
5
What impact can CVE-2015-0623 have on my system?
CVE-2015-0623 may allow remote attackers to inject arbitrary web scripts or HTML into the Administrator report page.