Vulnerability Details CVE-2016-1296
The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2016-1296
-
cpe:2.3:a:cisco:web_security_appliance:8.5.3-055
-
cpe:2.3:a:cisco:web_security_appliance:9.1.0-000
-
cpe:2.3:a:cisco:web_security_appliance:9.5.0-235