What is CVE-2021-1129?

CVE-2021-1129 is a medium-severity vulnerability in Cisco Web Security Appliance (Wsa), classified under Insertion of Sensitive Information into Sent Data. CVSS score: 5.3/10. Published 2021-01-20.

How severe is CVE-2021-1129?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Cisco Web Security Appliance (Wsa)

CVE-2021-1129

A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security Appliance (WSA) could allow an unauthentic…

EPSS: 0.011 (63.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Cisco Web Security Appliance (Wsa) — versions n/a
Cisco Content_security_management_appliance — versions 12.5.0
Cisco Email_security_appliance — versions 13.0.0
Cisco Web_security_appliance — versions 11.8.0

Weakness classification (CWE)

CWE-201 — Insertion of Sensitive Information into Sent Data

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1129?: CVE-2021-1129 is a medium-severity vulnerability in Cisco Web Security Appliance (Wsa), classified under Insertion of Sensitive Information into Sent Data. CVSS score: 5.3/10. Published 2021-01-20.
How severe is CVE-2021-1129?: Medium severity. CVSS v3 base score is 5.3 out of 10.