cisco email security virtual appliance 8.5.7 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances and Cisco Web Security Appliances could allow an unauthenticated, remote malicious user to bypass user filters that are configured for an affected device. Affected...

Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 10.0.0-232 Cisco Email Security Appliance 9.7.2-047 Cisco Email Security Appliance 10.0.0-125

5

CVSSv2

A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious user to bypass configured user filters on the device....

Cisco Email Security Appliance 8.9.1-000 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 9.1.0-032 Cisco Email Security Appliance 9.1.0 Cisco Email Security Appliance 9.5.0-000 Cisco Email Security Appliance 8.5.6-052 Cisco Email Security Appliance 8.5.0-000 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.6.0-000 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 9.1.0-011 Cisco Email Security Appliance 8.0.1-023 Cisco Email Security Appliance 8.6.0-011 Cisco Email Security Appliance 8.5.6-106 Cisco Email Security Appliance 9.1.1-000 Cisco Email Security Appliance 9.0.5-000 Cisco Email Security Appliance 9.5.0-201 Cisco Email Security Appliance 8.5.0-er1-198 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 9.0.0

7.8

CVSSv2

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device.Affected Products: This vulnerability affe...

Cisco Email Security Appliance 8.5.6-106 Cisco Email Security Appliance 9.1.1-000 Cisco Email Security Appliance 9.0.5-000 Cisco Email Security Appliance 9.5.0-201 Cisco Email Security Appliance 8.5.0-er1-198 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 9.4.4-000 Cisco Email Security Appliance 8.6.0 Cisco Email Security Appliance 8.5.6-074 Cisco Email Security Appliance 9.6.0-000 Cisco Email Security Appliance 9.1.0 Cisco Email Security Appliance 9.4.0 Cisco Email Security Appliance 8.5.6-073 Cisco Email Security Appliance 9.0.0-212 Cisco Email Security Appliance 8.5.0-000 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 9.1.0-101 Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 9.1.0-011

7.8

CVSSv2

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to cause an affected device to stop scanning and for...

Cisco Email Security Appliance 8.9.1-000 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 9.1.0-032 Cisco Email Security Appliance 8.6.0 Cisco Email Security Appliance 8.5.0-000 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 9.1.0-101 Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 9.0.0-212 Cisco Email Security Appliance 8.6.0-011 Cisco Email Security Appliance 9.0.0 Cisco Email Security Appliance 9.6.0-051 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 9.5.0-000 Cisco Email Security Appliance 9.4.4-000 Cisco Email Security Appliance 8.5.6-074 Cisco Email Security Appliance 9.6.0-000 Cisco Email Security Appliance 9.1.0 Cisco Email Security Appliance 9.4.0 Cisco Email Security Appliance 8.5.6-052

7.8

CVSSv2

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) c...

Cisco Email Security Appliance 8.9.1-000 Cisco Email Security Appliance 7.5.1 Cisco Email Security Appliance 9.7.1-066 Cisco Email Security Appliance 9.1.0-101 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 9.5.0-000 Cisco Email Security Appliance 8.5.6-052 Cisco Email Security Appliance 7.8.0-311 Cisco Email Security Appliance 9.4.4-000 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 9.1.0 Cisco Email Security Appliance 9.4.0 Cisco Email Security Appliance 7.1.2 Cisco Email Security Appliance 8.6.0 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 7.6.0 Cisco Email Security Appliance 7.1.1 Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 7.7.0-000 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 8.5.6-074

5

CVSSv2

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious use...

Cisco Web Security Appliance 9.1.0-000 Cisco Email Security Appliance 9.9 Base Cisco Email Security Appliance 8.9.1-000 Cisco Web Security Appliance 7.1.0 Cisco Email Security Appliance 9.6.0-051 Cisco Email Security Appliance 9.7.1-066 Cisco Web Security Appliance 8.5.2-024 Cisco Web Security Appliance 9.5.0-235 Cisco Email Security Appliance 9.0.0 Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 8.5.0-000 Cisco Web Security Appliance 8.0.5 Hot Patch 1 Cisco Email Security Appliance 8.0 Base Cisco Web Security Appliance 7.1.2 Cisco Email Security Appliance 9.1.0-032 Cisco Web Security Appliance 8.5.2-027 Cisco Web Security Appliance 7.1.1 Cisco Web Security Appliance 8.8.0-085 Cisco Web Security Appliance 8.0.7-142 Cisco Email Security Appliance 8.9.0 Cisco Email Security Appliance 9.7.0-125 Cisco Email Security Appliance 8.5.6-074

5

CVSSv2

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices prior to 2015-06-25 uses the same default SSH root authorized key across different customers' installa...

Cisco Web Security Virtual Appliance 7.7.5 Cisco Email Security Virtual Appliance 8.5.7 Cisco Email Security Virtual Appliance 8.5.6 Cisco Email Security Virtual Appliance 8.0.0 Cisco Web Security Virtual Appliance 8.7.0 Cisco Content Security Management Virtual Appliance 9.0.0.087 Cisco Web Security Virtual Appliance 8.5.1 Cisco Web Security Virtual Appliance 8.0.5 Cisco Content Security Management Virtual Appliance 8.4.0.0150 Cisco Email Security Virtual Appliance 9.0.0 Cisco Web Security Virtual Appliance 8.6.0 Cisco Web Security Virtual Appliance 8.5.0

10

CVSSv2

Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment Client prior to 1.0.2-065 is installed, allows remote malicious users to obtain root access via a connect...

Cisco Email Security Appliance Firmware 9.1.2-036 Cisco Email Security Appliance Firmware 9.7.2-046 Cisco Email Security Appliance Firmware 10.0.0-124 Cisco Email Security Appliance Firmware 10.0.0-125 Cisco Email Security Appliance Firmware 9.1.2-023 Cisco Email Security Appliance Firmware 9.1.2-028 Cisco Email Security Appliance Firmware 9.7.2-047 Cisco Email Security Appliance Firmware 9.7.2-054

4.3

CVSSv2

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices prior to 2015-06-25 uses the same default SSH host keys across different customers' installations, whi...

Cisco Web Security Virtual Appliance 8.6.0 Cisco Web Security Virtual Appliance 8.5.1 Cisco Web Security Virtual Appliance 8.5.0 Cisco Web Security Virtual Appliance 8.0.5 Cisco Content Security Management Virtual Appliance 8.4.0.0150 Cisco Content Security Management Virtual Appliance 9.0.0.087 Cisco Email Security Virtual Appliance 9.0.0 Cisco Email Security Virtual Appliance 8.5.7 Cisco Email Security Virtual Appliance 8.0.0 Cisco Email Security Virtual Appliance 8.5.6 Cisco Web Security Virtual Appliance 8.7.0 Cisco Web Security Virtual Appliance 7.7.5

7.8

CVSSv2

Cisco AsyncOS prior to 8.5.7-043, 9.x prior to 9.1.1-023, and 9.5.x and 9.6.x prior to 9.6.0-046 on Email Security Appliance (ESA) devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-matc...

Cisco Email Security Appliance 8.0 Base Cisco Email Security Appliance 8.5 Base Cisco Email Security Appliance 8.5.6-113 Cisco Email Security Appliance 9.1.0-032 Cisco Email Security Appliance 8.5.6-073 Cisco Email Security Appliance 9.0.0 Cisco Email Security Appliance 9.0.0-461 Cisco Email Security Appliance 8.5.6-052 Cisco Email Security Appliance 9.0.0-212 Cisco Email Security Appliance 8.5.7-042 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 9.0.5-000 Cisco Email Security Appliance 8.5.6-106 Cisco Email Security Appliance 8.5.6-074 Cisco Email Security Appliance 7.7.0-000 Cisco Email Security Appliance 7.7.1-000

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook