CVE-2015-0628: Cisco Web Security Appliance

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass intended proxying restrictions via a malformed HTTP method, aka Bug ID CSCus79174.

Affected products

• Cisco Web Security Appliance: affected versions not specified

Published 2015-02-20. Last modified 2026-06-17.