CVE-2013-3383

2013-06-2721:00:00

cisco

www.cve.org

web framework

ironport asyncos

cisco web security appliance

remote authenticated users

execute arbitrary commands

crafted url input

bug id csczv69294

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

59.2%

JSON

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294.