CVE-2015-0732

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-07-29 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167.

Affected products

Cisco Content Security Management Virtual Appliance: 9.1.0-033
Cisco Email Security Appliance: 8.5.6-113, 9.1.0-032, 9.1.1-000, 9.6.0-000
Cisco Web Security Appliance (WSA): 9.0.0-193

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=40172
http://www.securitytracker.com/id/1033086
http://www.securitytracker.com/id/1033087
http://tools.cisco.com/security/center/viewAlert.x?alertId=40172
http://www.securitytracker.com/id/1033086
http://www.securitytracker.com/id/1033087

Get alerted when CVE-2015-0732 or the next vulnerability affects your stack