| Package | Affected versions | Patched versions |
|---|---|---|
| web security virtual appliance | = 7.1.0= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 7.5.0= 7.5.1≤ 7.7 |
CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free