← Vulnerability feed

Vulnerability record · CVE-2015-6292 · published 6 November 2015

CVE-2015-6292: Cisco web security appliance vulnerability

Cisco · Web Security Appliance

The proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8.5.2-004, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via multiple proxy connections, aka Bug ID CSCus10922.

7.8 CVSS 2.0 High EPSS 1.9% · top 20.9% CWE-399 · CWE-399
7.8CVSS 2.0 base score
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

The proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8.5.2-004, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via multiple proxy connections, aka Bug ID CSCus10922.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-wsa1 Vendor Advisory
http://www.securitytracker.com/id/1034062
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-wsa1 Vendor Advisory
http://www.securitytracker.com/id/1034062

Track CVE-2015-6292 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-20032Cisco secure endpoint classic buffer overflow vulnerabilityOn Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamA…EPSS 29%9.0CVE-2015-6298Cisco web security appliance os command injection vulnerabilityThe admin web interface in Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x befor…EPSS 1.7%8.8CVE-2021-1359Cisco web security appliance vulnerabilityA vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker…EPSS 1.9%8.8CVE-2019-15956Cisco asyncos improper access control vulnerabilityA vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote…EPSS 0.98%8.6CVE-2019-1886Cisco asyncos improper input validation vulnerabilityA vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a deni…EPSS 1.3%8.6CVE-2018-0410Cisco web security appliance uncontrolled resource consumption vulnerabilityA vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote att…EPSS 4.1%7.8CVE-2019-1816Cisco web security appliance improper input validation vulnerabilityA vulnerability in the log subscription subsystem of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform c…EPSS 0.64%7.8CVE-2015-6321Cisco web security appliance vulnerabilityCisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) …EPSS 2.8%

Source: NIST National Vulnerability Database (record CVE-2015-6292), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.