Bastion Security

Cisco CWS — SQL Injection vulnerability

Jason Xie found an authenticated SQL injection vulnerability in the Cisco Cloud Web Security (CWS) web application. If exploited an attacker could extract or modify values stored in the underlying database.

Talk to an expert

[no content]

April 21, 2020

For further details please see the ZX Security Advisory or the Cisco security advisory.

Service Development Manager

Government Agency

"Great service, clear, detailed and precise information on what our vulnerabilities were and what needs addressing. Couldn't have been easier to deal with and very professional."

Expert methods

We have the tools to pinpoint risks

Whether it’s hidden vulnerabilities or patterns you might miss, we help you stay one step ahead and make confident, informed decisions. Understand how our services can help your business uncover critical risks

Talk to an expert

Employee Cyber Training & Awareness

Our employee cyber training builds awareness of phishing, social engineering and everyday security habits, making your people your first line of defence.

Advisory

Our advisory services give senior guidance on strategy, risk and governance, including vCISO support, so your leaders can make defensible security decisions.

Are you experiencing a security breach?

Incident Response

+64 4 281 7534