Vulnerabilities > CVE-2021-1490 - Unspecified vulnerability in Cisco web Security Appliance

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cisco

NVD

Published: 2021-05-06

Updated: 2024-11-21

Summary

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by persuading a user to retrieve a crafted file that contains malicious payload and upload it to the affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco WEB Security Appliance - Cisco WEB Security Appliance 7.1.0 Cisco WEB Security Appliance 7.1.1 Cisco WEB Security Appliance 7.1.2 Cisco WEB Security Appliance 7.1.3 Cisco WEB Security Appliance 7.1.4 Cisco WEB Security Appliance 7.5.2-Hp2-303 Cisco WEB Security Appliance 7.7.0-608 Cisco WEB Security Appliance 7.7.5-835 Cisco WEB Security Appliance 8.0.5_Hp1 Cisco WEB Security Appliance 8.0.7 Cisco WEB Security Appliance 8.5.0-000 Cisco WEB Security Appliance 8.5.2-027 Cisco WEB Security Appliance 8.5.3-055 Cisco WEB Security Appliance 8.5.3-069 Cisco WEB Security Appliance 8.5_Base Cisco WEB Security Appliance 8.8.0-000 Cisco WEB Security Appliance 8.8.0-085 Cisco WEB Security Appliance 9.0.0-162 Cisco WEB Security Appliance 9.0.0-193 Cisco WEB Security Appliance 9.0.0-485 Cisco WEB Security Appliance 9.0.1-162 Cisco WEB Security Appliance 9.0_Base Cisco WEB Security Appliance 9.1.0-000 Cisco WEB Security Appliance 9.1.0-070 Cisco WEB Security Appliance 9.1.1-074 Cisco WEB Security Appliance 9.1.2-010 Cisco WEB Security Appliance 9.1.2-022 Cisco WEB Security Appliance 9.1.2-039 Cisco WEB Security Appliance 9.1_Base Cisco WEB Security Appliance 9.5.0-235 Cisco WEB Security Appliance 9.5.0-284 Cisco WEB Security Appliance 9.5.0-444 Cisco WEB Security Appliance 9.5_Base Cisco WEB Security Appliance 10.0.0-082 Cisco WEB Security Appliance 10.0.0-124 Cisco WEB Security Appliance 10.0.0-125 Cisco WEB Security Appliance 10.0.0-203 Cisco WEB Security Appliance 10.0.0-230 Cisco WEB Security Appliance 10.0.0-232 Cisco WEB Security Appliance 10.0.0-233 Cisco WEB Security Appliance 10.0_Base Cisco WEB Security Appliance 10.1.0 Cisco WEB Security Appliance 10.1.0-204 Cisco WEB Security Appliance 10.1.1-230 Cisco WEB Security Appliance 10.1.1-234 Cisco WEB Security Appliance 10.1.1-235 Cisco WEB Security Appliance 10.1.2-003 Cisco WEB Security Appliance 10.1.4-017 Cisco WEB Security Appliance 10.5.0 Cisco WEB Security Appliance 10.5.0-358 Cisco WEB Security Appliance 10.5.1 Cisco WEB Security Appliance 10.5.1-269 Cisco WEB Security Appliance 10.5.1-270 Cisco WEB Security Appliance 10.5.1-276 Cisco WEB Security Appliance 10.5.1-296 Cisco WEB Security Appliance 10.5.2 Cisco WEB Security Appliance 10.5.2-042 Cisco WEB Security Appliance 10.5.2-072 Cisco WEB Security Appliance 10.5.3-025 Cisco WEB Security Appliance 11.0.0 Cisco WEB Security Appliance 11.0.0-613 Cisco WEB Security Appliance 11.0.0-641 Cisco WEB Security Appliance 11.5.0-Fcs-442 Cisco WEB Security Appliance 11.5.0-Fcs-581 Cisco WEB Security Appliance 11.5.0-Fcs-614 Cisco WEB Security Appliance 11.5.1-Fcs-115 Cisco WEB Security Appliance 11.5.1-Fcs-124 Cisco WEB Security Appliance 11.5.1-Fcs-125 Cisco WEB Security Appliance 11.7.0 Cisco WEB Security Appliance 11.7.0-256 Cisco WEB Security Appliance 11.7.0-Fcs-334 Cisco WEB Security Appliance 11.7.2-011 Cisco WEB Security Appliance 11.8.0 Cisco WEB Security Appliance 11.8.0-382 Cisco WEB Security Appliance 11.8.0-429 Cisco WEB Security Appliance 11.8.0-453 Cisco WEB Security Appliance 12.0 Cisco WEB Security Appliance 12.0.1-268 Cisco WEB Security Appliance 12.0.5-011 Cisco WEB Security Appliance 12.5 Cisco WEB Security Appliance 12.5.0-722 Cisco WEB Security Appliance 12.5.1-011 Cisco WEB Security Appliance 12.5.1-043 Cisco WEB Security Appliance 12.5.2-011 Cisco WEB Security Appliance 12.5.4-005 Cisco WEB Security Appliance 12.5.6 Cisco WEB Security Appliance 12.7.0-033	88

Summary

Vulnerable Configurations

References