CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-1490

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by persuading a user to retrieve a crafted file that contains malicious payload and upload it to the affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 43.0%

CVSS Severity

CVSS v3 Score 4.7

CVSS v2 Score 4.3

References

Products affected by CVE-2021-1490

Cisco » Web Security Appliance » Version: N/A

cpe:2.3:a:cisco:web_security_appliance:-
Cisco » Web Security Appliance » Version: 10.0.0-082

cpe:2.3:a:cisco:web_security_appliance:10.0.0-082
Cisco » Web Security Appliance » Version: 10.0.0-124

cpe:2.3:a:cisco:web_security_appliance:10.0.0-124
Cisco » Web Security Appliance » Version: 10.0.0-125

cpe:2.3:a:cisco:web_security_appliance:10.0.0-125
Cisco » Web Security Appliance » Version: 10.0.0-203

cpe:2.3:a:cisco:web_security_appliance:10.0.0-203
Cisco » Web Security Appliance » Version: 10.0.0-230

cpe:2.3:a:cisco:web_security_appliance:10.0.0-230
Cisco » Web Security Appliance » Version: 10.0.0-232

cpe:2.3:a:cisco:web_security_appliance:10.0.0-232
Cisco » Web Security Appliance » Version: 10.0.0-233

cpe:2.3:a:cisco:web_security_appliance:10.0.0-233
Cisco » Web Security Appliance » Version: 10.0_base

cpe:2.3:a:cisco:web_security_appliance:10.0_base
Cisco » Web Security Appliance » Version: 10.1.0

cpe:2.3:a:cisco:web_security_appliance:10.1.0
Cisco » Web Security Appliance » Version: 10.1.0-204

cpe:2.3:a:cisco:web_security_appliance:10.1.0-204
Cisco » Web Security Appliance » Version: 10.1.1-230

cpe:2.3:a:cisco:web_security_appliance:10.1.1-230
Cisco » Web Security Appliance » Version: 10.1.1-234

cpe:2.3:a:cisco:web_security_appliance:10.1.1-234
Cisco » Web Security Appliance » Version: 10.1.1-235

cpe:2.3:a:cisco:web_security_appliance:10.1.1-235
Cisco » Web Security Appliance » Version: 10.1.2-003

cpe:2.3:a:cisco:web_security_appliance:10.1.2-003
Cisco » Web Security Appliance » Version: 10.1.4-017

cpe:2.3:a:cisco:web_security_appliance:10.1.4-017
Cisco » Web Security Appliance » Version: 10.5.0

cpe:2.3:a:cisco:web_security_appliance:10.5.0
Cisco » Web Security Appliance » Version: 10.5.0-358

cpe:2.3:a:cisco:web_security_appliance:10.5.0-358
Cisco » Web Security Appliance » Version: 10.5.1

cpe:2.3:a:cisco:web_security_appliance:10.5.1
Cisco » Web Security Appliance » Version: 10.5.1-269

cpe:2.3:a:cisco:web_security_appliance:10.5.1-269
Cisco » Web Security Appliance » Version: 10.5.1-270

cpe:2.3:a:cisco:web_security_appliance:10.5.1-270
Cisco » Web Security Appliance » Version: 10.5.1-276

cpe:2.3:a:cisco:web_security_appliance:10.5.1-276
Cisco » Web Security Appliance » Version: 10.5.1-296

cpe:2.3:a:cisco:web_security_appliance:10.5.1-296
Cisco » Web Security Appliance » Version: 10.5.2

cpe:2.3:a:cisco:web_security_appliance:10.5.2
Cisco » Web Security Appliance » Version: 10.5.2-042

cpe:2.3:a:cisco:web_security_appliance:10.5.2-042
Cisco » Web Security Appliance » Version: 10.5.2-072

cpe:2.3:a:cisco:web_security_appliance:10.5.2-072
Cisco » Web Security Appliance » Version: 10.5.3-025

cpe:2.3:a:cisco:web_security_appliance:10.5.3-025
Cisco » Web Security Appliance » Version: 11.0.0

cpe:2.3:a:cisco:web_security_appliance:11.0.0
Cisco » Web Security Appliance » Version: 11.0.0-613

cpe:2.3:a:cisco:web_security_appliance:11.0.0-613
Cisco » Web Security Appliance » Version: 11.0.0-641

cpe:2.3:a:cisco:web_security_appliance:11.0.0-641
Cisco » Web Security Appliance » Version: 11.5.0-fcs-442

cpe:2.3:a:cisco:web_security_appliance:11.5.0-fcs-442
Cisco » Web Security Appliance » Version: 11.5.0-fcs-581

cpe:2.3:a:cisco:web_security_appliance:11.5.0-fcs-581
Cisco » Web Security Appliance » Version: 11.5.0-fcs-614

cpe:2.3:a:cisco:web_security_appliance:11.5.0-fcs-614
Cisco » Web Security Appliance » Version: 11.5.1-fcs-115

cpe:2.3:a:cisco:web_security_appliance:11.5.1-fcs-115
Cisco » Web Security Appliance » Version: 11.5.1-fcs-124

cpe:2.3:a:cisco:web_security_appliance:11.5.1-fcs-124
Cisco » Web Security Appliance » Version: 11.5.1-fcs-125

cpe:2.3:a:cisco:web_security_appliance:11.5.1-fcs-125
Cisco » Web Security Appliance » Version: 11.7.0

cpe:2.3:a:cisco:web_security_appliance:11.7.0
Cisco » Web Security Appliance » Version: 11.7.0-256

cpe:2.3:a:cisco:web_security_appliance:11.7.0-256
Cisco » Web Security Appliance » Version: 11.7.0-fcs-334

cpe:2.3:a:cisco:web_security_appliance:11.7.0-fcs-334
Cisco » Web Security Appliance » Version: 11.7.2-011

cpe:2.3:a:cisco:web_security_appliance:11.7.2-011
Cisco » Web Security Appliance » Version: 11.8.0

cpe:2.3:a:cisco:web_security_appliance:11.8.0
Cisco » Web Security Appliance » Version: 11.8.0-382

cpe:2.3:a:cisco:web_security_appliance:11.8.0-382
Cisco » Web Security Appliance » Version: 11.8.0-429

cpe:2.3:a:cisco:web_security_appliance:11.8.0-429
Cisco » Web Security Appliance » Version: 11.8.0-453

cpe:2.3:a:cisco:web_security_appliance:11.8.0-453
Cisco » Web Security Appliance » Version: 12.0

cpe:2.3:a:cisco:web_security_appliance:12.0
Cisco » Web Security Appliance » Version: 12.0.1-268

cpe:2.3:a:cisco:web_security_appliance:12.0.1-268
Cisco » Web Security Appliance » Version: 12.0.5-011

cpe:2.3:a:cisco:web_security_appliance:12.0.5-011
Cisco » Web Security Appliance » Version: 12.5

cpe:2.3:a:cisco:web_security_appliance:12.5
Cisco » Web Security Appliance » Version: 12.5.0-722

cpe:2.3:a:cisco:web_security_appliance:12.5.0-722
Cisco » Web Security Appliance » Version: 12.5.1-011

cpe:2.3:a:cisco:web_security_appliance:12.5.1-011
Cisco » Web Security Appliance » Version: 12.5.1-043

cpe:2.3:a:cisco:web_security_appliance:12.5.1-043
Cisco » Web Security Appliance » Version: 12.5.2-011

cpe:2.3:a:cisco:web_security_appliance:12.5.2-011
Cisco » Web Security Appliance » Version: 12.5.4-005

cpe:2.3:a:cisco:web_security_appliance:12.5.4-005
Cisco » Web Security Appliance » Version: 12.5.6

cpe:2.3:a:cisco:web_security_appliance:12.5.6
Cisco » Web Security Appliance » Version: 12.7.0-033

cpe:2.3:a:cisco:web_security_appliance:12.7.0-033
Cisco » Web Security Appliance » Version: 7.1.0

cpe:2.3:a:cisco:web_security_appliance:7.1.0
Cisco » Web Security Appliance » Version: 7.1.1

cpe:2.3:a:cisco:web_security_appliance:7.1.1
Cisco » Web Security Appliance » Version: 7.1.2

cpe:2.3:a:cisco:web_security_appliance:7.1.2
Cisco » Web Security Appliance » Version: 7.1.3

cpe:2.3:a:cisco:web_security_appliance:7.1.3
Cisco » Web Security Appliance » Version: 7.1.4

cpe:2.3:a:cisco:web_security_appliance:7.1.4
Cisco » Web Security Appliance » Version: 7.5.2-hp2-303

cpe:2.3:a:cisco:web_security_appliance:7.5.2-hp2-303
Cisco » Web Security Appliance » Version: 7.7.0-608

cpe:2.3:a:cisco:web_security_appliance:7.7.0-608
Cisco » Web Security Appliance » Version: 7.7.5-835

cpe:2.3:a:cisco:web_security_appliance:7.7.5-835
Cisco » Web Security Appliance » Version: 8.0.5_hp1

cpe:2.3:a:cisco:web_security_appliance:8.0.5_hp1
Cisco » Web Security Appliance » Version: 8.0.7

cpe:2.3:a:cisco:web_security_appliance:8.0.7
Cisco » Web Security Appliance » Version: 8.5.0-000

cpe:2.3:a:cisco:web_security_appliance:8.5.0-000
Cisco » Web Security Appliance » Version: 8.5.2-027

cpe:2.3:a:cisco:web_security_appliance:8.5.2-027
Cisco » Web Security Appliance » Version: 8.5.3-055

cpe:2.3:a:cisco:web_security_appliance:8.5.3-055
Cisco » Web Security Appliance » Version: 8.5.3-069

cpe:2.3:a:cisco:web_security_appliance:8.5.3-069
Cisco » Web Security Appliance » Version: 8.5_base

cpe:2.3:a:cisco:web_security_appliance:8.5_base
Cisco » Web Security Appliance » Version: 8.8.0-000

cpe:2.3:a:cisco:web_security_appliance:8.8.0-000
Cisco » Web Security Appliance » Version: 8.8.0-085

cpe:2.3:a:cisco:web_security_appliance:8.8.0-085
Cisco » Web Security Appliance » Version: 9.0.0-162

cpe:2.3:a:cisco:web_security_appliance:9.0.0-162
Cisco » Web Security Appliance » Version: 9.0.0-193

cpe:2.3:a:cisco:web_security_appliance:9.0.0-193
Cisco » Web Security Appliance » Version: 9.0.0-485

cpe:2.3:a:cisco:web_security_appliance:9.0.0-485
Cisco » Web Security Appliance » Version: 9.0.1-162

cpe:2.3:a:cisco:web_security_appliance:9.0.1-162
Cisco » Web Security Appliance » Version: 9.0_base

cpe:2.3:a:cisco:web_security_appliance:9.0_base
Cisco » Web Security Appliance » Version: 9.1.0-000

cpe:2.3:a:cisco:web_security_appliance:9.1.0-000
Cisco » Web Security Appliance » Version: 9.1.0-070

cpe:2.3:a:cisco:web_security_appliance:9.1.0-070
Cisco » Web Security Appliance » Version: 9.1.1-074

cpe:2.3:a:cisco:web_security_appliance:9.1.1-074
Cisco » Web Security Appliance » Version: 9.1.2-010

cpe:2.3:a:cisco:web_security_appliance:9.1.2-010
Cisco » Web Security Appliance » Version: 9.1.2-022

cpe:2.3:a:cisco:web_security_appliance:9.1.2-022
Cisco » Web Security Appliance » Version: 9.1.2-039

cpe:2.3:a:cisco:web_security_appliance:9.1.2-039
Cisco » Web Security Appliance » Version: 9.1_base

cpe:2.3:a:cisco:web_security_appliance:9.1_base
Cisco » Web Security Appliance » Version: 9.5.0-235

cpe:2.3:a:cisco:web_security_appliance:9.5.0-235
Cisco » Web Security Appliance » Version: 9.5.0-284

cpe:2.3:a:cisco:web_security_appliance:9.5.0-284
Cisco » Web Security Appliance » Version: 9.5.0-444

cpe:2.3:a:cisco:web_security_appliance:9.5.0-444
Cisco » Web Security Appliance » Version: 9.5_base

cpe:2.3:a:cisco:web_security_appliance:9.5_base

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-1490

Products

Pricing

Contact Us