CVE-2015-0674

MEDIUM

Cisco Cloud Web Security - Cross-Site Scripting in Alert Service

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

https://tools.cisco.com/security/center/viewAlert.x?alertId=38058

Scores

CVSS v3 6.1

EPSS 0.0076

EPSS Percentile 51.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

cisco/cloud_web_security

Published Jul 25, 2017

Tracked Since Feb 18, 2026