CVE-2015-0577
Cisco AsyncOS - Cross-Site Scripting via IronPort Spam Quarantine Page Parameters
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA), allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCus22925 and CSCup08113.
References (5)
Core 5
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0577
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/100556
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031544
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72056
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/62289
Scores
EPSS
0.0116
EPSS Percentile
63.9%
Details
CWE
CWE-79
Status
published
Products (1)
cisco/asyncos
Published
Jan 14, 2015
Tracked Since
Feb 18, 2026