cisco email security virtual appliance 8.5.6 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious user to bypass configured user filters on the device....

Cisco Email Security Appliance 8.9.1-000 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 9.1.0-032 Cisco Email Security Appliance 9.1.0 Cisco Email Security Appliance 9.5.0-000 Cisco Email Security Appliance 8.5.6-052 Cisco Email Security Appliance 8.5.0-000 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.6.0-000 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 9.1.0-011 Cisco Email Security Appliance 8.0.1-023 Cisco Email Security Appliance 8.6.0-011 Cisco Email Security Appliance 8.5.6-106 Cisco Email Security Appliance 9.1.1-000 Cisco Email Security Appliance 9.0.5-000 Cisco Email Security Appliance 9.5.0-201 Cisco Email Security Appliance 8.5.0-er1-198 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 9.0.0

7.8

CVSSv2

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device.Affected Products: This vulnerability affe...

Cisco Email Security Appliance 8.5.6-106 Cisco Email Security Appliance 9.1.1-000 Cisco Email Security Appliance 9.0.5-000 Cisco Email Security Appliance 9.5.0-201 Cisco Email Security Appliance 8.5.0-er1-198 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 9.4.4-000 Cisco Email Security Appliance 8.6.0 Cisco Email Security Appliance 8.5.6-074 Cisco Email Security Appliance 9.6.0-000 Cisco Email Security Appliance 9.1.0 Cisco Email Security Appliance 9.4.0 Cisco Email Security Appliance 8.5.6-073 Cisco Email Security Appliance 9.0.0-212 Cisco Email Security Appliance 8.5.0-000 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 9.1.0-101 Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 9.1.0-011

7.8

CVSSv2

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to cause an affected device to stop scanning and for...

Cisco Email Security Appliance 8.9.1-000 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 9.1.0-032 Cisco Email Security Appliance 8.6.0 Cisco Email Security Appliance 8.5.0-000 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 9.1.0-101 Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 9.0.0-212 Cisco Email Security Appliance 8.6.0-011 Cisco Email Security Appliance 9.0.0 Cisco Email Security Appliance 9.6.0-051 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 9.5.0-000 Cisco Email Security Appliance 9.4.4-000 Cisco Email Security Appliance 8.5.6-074 Cisco Email Security Appliance 9.6.0-000 Cisco Email Security Appliance 9.1.0 Cisco Email Security Appliance 9.4.0 Cisco Email Security Appliance 8.5.6-052

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote malicious users to injec...

Cisco Web Security Appliance 9.0.0-193 Cisco Content Security Management Virtual Appliance 9.1.0-033 Cisco Email Security Appliance Firmware 8.5.6-113 Cisco Email Security Appliance Firmware 9.6.0-000 Cisco Email Security Appliance Firmware 9.1.0-032 Cisco Email Security Appliance Firmware 9.1.1-000

7.8

CVSSv2

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) c...

Cisco Email Security Appliance 8.9.1-000 Cisco Email Security Appliance 7.5.1 Cisco Email Security Appliance 9.7.1-066 Cisco Email Security Appliance 9.1.0-101 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 9.5.0-000 Cisco Email Security Appliance 8.5.6-052 Cisco Email Security Appliance 7.8.0-311 Cisco Email Security Appliance 9.4.4-000 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 9.1.0 Cisco Email Security Appliance 9.4.0 Cisco Email Security Appliance 7.1.2 Cisco Email Security Appliance 8.6.0 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 7.6.0 Cisco Email Security Appliance 7.1.1 Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 7.7.0-000 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 8.5.6-074

5

CVSSv2

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious use...

Cisco Web Security Appliance 9.1.0-000 Cisco Email Security Appliance 9.9 Base Cisco Email Security Appliance 8.9.1-000 Cisco Web Security Appliance 7.1.0 Cisco Email Security Appliance 9.6.0-051 Cisco Email Security Appliance 9.7.1-066 Cisco Web Security Appliance 8.5.2-024 Cisco Web Security Appliance 9.5.0-235 Cisco Email Security Appliance 9.0.0 Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 8.5.0-000 Cisco Web Security Appliance 8.0.5 Hot Patch 1 Cisco Email Security Appliance 8.0 Base Cisco Web Security Appliance 7.1.2 Cisco Email Security Appliance 9.1.0-032 Cisco Web Security Appliance 8.5.2-027 Cisco Web Security Appliance 7.1.1 Cisco Web Security Appliance 8.8.0-085 Cisco Web Security Appliance 8.0.7-142 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 8.5.6-074

7.8

CVSSv2

Cisco AsyncOS prior to 8.5.7-043, 9.x prior to 9.1.1-023, and 9.5.x and 9.6.x prior to 9.6.0-046 on Email Security Appliance (ESA) devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-matc...

Cisco Email Security Appliance 8.0 Base Cisco Email Security Appliance 8.5 Base Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 9.1.0-032 Cisco Email Security Appliance 8.5.6-073 Cisco Email Security Appliance 9.0.0 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 8.5.6-052 Cisco Email Security Appliance 9.0.0-212 Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 9.0.5-000 Cisco Email Security Appliance 8.5.6-106 Cisco Email Security Appliance 8.5.6-074 Cisco Email Security Appliance 7.7.0-000 Cisco Email Security Appliance 7.7.1-000

5

CVSSv2

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices prior to 2015-06-25 uses the same default SSH root authorized key across different customers' installa...

Cisco Web Security Virtual Appliance 7.7.5 Cisco Email Security Virtual Appliance 8.5.7 Cisco Email Security Virtual Appliance 8.5.6 Cisco Email Security Virtual Appliance 8.0.0 Cisco Web Security Virtual Appliance 8.7.0 Cisco Content Security Management Virtual Appliance 9.0.0.087 Cisco Web Security Virtual Appliance 8.5.1 Cisco Web Security Virtual Appliance 8.0.5 Cisco Content Security Management Virtual Appliance 8.4.0.0150 Cisco Email Security Virtual Appliance 9.0.0 Cisco Web Security Virtual Appliance 8.6.0 Cisco Web Security Virtual Appliance 8.5.0

4.3

CVSSv2

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices prior to 2015-06-25 uses the same default SSH host keys across different customers' installations, whi...

Cisco Web Security Virtual Appliance 8.6.0 Cisco Web Security Virtual Appliance 8.5.1 Cisco Web Security Virtual Appliance 8.5.0 Cisco Web Security Virtual Appliance 8.0.5 Cisco Content Security Management Virtual Appliance 8.4.0.0150 Cisco Content Security Management Virtual Appliance 9.0.0.087 Cisco Email Security Virtual Appliance 9.0.0 Cisco Email Security Virtual Appliance 8.5.7 Cisco Email Security Virtual Appliance 8.0.0 Cisco Email Security Virtual Appliance 8.5.6 Cisco Web Security Virtual Appliance 8.7.0 Cisco Web Security Virtual Appliance 7.7.5

5

CVSSv2

The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote malicious users to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733.

Cisco Email Security Appliance 3.331-09 Cisco Email Security Appliance 7.5.1-gpl-022 Cisco Email Security Appliance 8.5.6-074

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook