Improper input validation in Cisco Content_security_management_appliance
CVE-2015-0624
The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (35.2th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- psirt@cisco.com (Exploit, x_refsource_MISC)
- 1031782 (vdb-entry, x_refsource_SECTRACK)
- 72702 (vdb-entry, x_refsource_BID)
- 1031781 (vdb-entry, x_refsource_SECTRACK)
- 20150220 Cisco AsyncOS Software HTTP Redirect Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)