CVE-2015-0732

Name: CVE-2015-0732
Creator: NVD / NIST
Published: 2015-07-29T01:59:00.093+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.79%

Last modified Jun 17, 2026

CVE-2015-0732 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167.. EPSS estimates a 1.79% chance of exploitation in the next 30 days.

Description

Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167.

Metrics

EPSS Probability

1.79%

75.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Cisco	Web Security Appliance	9.0.0-193
Cisco	Content Security Management Virtual Appliance	9.1.0-033
Cisco	Email Security Appliance Firmware	8.5.6-113
Cisco	Email Security Appliance Firmware	9.1.0-032
Cisco	Email Security Appliance Firmware	9.1.1-000
Cisco	Email Security Appliance Firmware	9.6.0-000

References

Timeline

Published: Jul 29, 2015
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2015-0732?

How severe is CVE-2015-0732?

Severity scoring for CVE-2015-0732 is pending analysis. The EPSS model estimates a 1.79% probability of exploitation in the next 30 days.

How do I fix CVE-2015-0732?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-0732?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST