Cisco Web Security Appliance (wsa) vulnerabilities

2 CVEs affecting Cisco Web Security Appliance (wsa), 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1383, published 2016-05-25.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-1382, published 2016-05-25. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation for HTTP requests, which allows remote attackers to cause a denial of service…
• CVE-2016-1383, published 2016-05-25. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via an unspecified HTTP status code, aka Bug…