VulnerabilityModified

CVE-2015-0674

Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

MEDIUM 6.1EPSS 0.76%

Does this matter?

Lower severity and a low EPSS score (0.76%). Track it; it rarely justifies an emergency change on its own.

Description

Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

CVSS 3.0: 6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.76% probability · 53th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: cisco/cloud web security
Source: psirt@cisco.com

References

https://tools.cisco.com/security/center/viewAlert.x?alertId=38058Vendor Advisory
https://tools.cisco.com/security/center/viewAlert.x?alertId=38058Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.