CVE-2015-0734

Cisco Email Security Appliance Firmware 8.5.6-106 - Cross-Site Scripting via GET or POST Parameters

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8.5.6-106 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCut87743.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38866
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032333

Scores

EPSS 0.0155
EPSS Percentile 72.4%

Details

CWE
CWE-79
Status published
Products (1)
cisco/email_security_appliance_firmware 8.5.6-106
Published May 15, 2015
Tracked Since Feb 18, 2026