Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco email security appliance firmware - vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2016-6458
A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to bypass content filters configured on an affected device. Email that should have been filtered could instea...
Cisco Email Security Appliance Firmware 9.7.2-047Cisco Email Security Appliance Firmware 9.7.2-054Cisco Email Security Appliance Firmware 9.7.1-066Cisco Email Security Appliance Firmware 9.7.2-046Cisco Email Security Appliance Firmware 10.0.0-124Cisco Email Security Appliance Firmware 10.0.0-125Cisco Email Security Appliance Firmware 9.9 BaseCisco Email Security Appliance Firmware 9.9.6-026
5.3
CVSSv3
CVE-2016-6463
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to bypass Advanced Malware Protection (AMP) filters that are configured for an affected device. This vulnerabil...
Cisco Email Security Appliance Firmware 9.7.1-06Cisco Email Security Appliance Firmware 10.0.0-082Cisco Email Security Appliance Firmware 9.7.0-125
5.3
CVSSv3
CVE-2016-6462
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to bypass Advanced Malware Protection (AMP) filters that are configured for an affected device. This vulnerabil...
Cisco Email Security Appliance Firmware 10.0.0-125Cisco Email Security Appliance Firmware 10.0.0-082Cisco Email Security Appliance Firmware 9.7.1-06
NA
CVE-2015-0732
Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote malicious users to injec...
Cisco Web Security Appliance 9.0.0-193Cisco Content Security Management Virtual Appliance 9.1.0-033Cisco Email Security Appliance Firmware 8.5.6-113Cisco Email Security Appliance Firmware 9.6.0-000Cisco Email Security Appliance Firmware 9.1.0-032Cisco Email Security Appliance Firmware 9.1.1-000
NA
CVE-2015-4236
Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote malicious users to cause a denial of service (clustering and SSH outage) via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636.
Cisco Email Security Appliance Firmware 8.5.6-073Cisco Email Security Appliance Firmware 9.0.0-461Cisco Email Security Appliance 8.5.6-074
NA
CVE-2015-4278
Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote malicious users to cause a denial of service (per-domain e-mail reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806.
Cisco Email Security Appliance Firmware 9.5.0-201Cisco Email Security Appliance Firmware 8.5.6-106
5.8
CVSSv3
CVE-2017-3827
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious user to bypass configured user filters on the device....
Cisco Web Security Appliance 10.0.0-082Cisco Web Security Appliance 10.0.0-125Cisco Email Security Appliance Firmware 9.9.6-026Cisco Email Security Appliance Firmware 10.0.0-082Cisco Web Security Appliance 10.0.0-124Cisco Email Security Appliance Firmware 10.0.0-232Cisco Email Security Appliance Firmware 9.9.9-894Cisco Email Security Appliance Firmware 10.0.0-203Cisco Web Security Appliance 10.0.0-232Cisco Web Security Appliance 10.0.0-203Cisco Email Security Appliance Firmware 10.0.0-125Cisco Email Security Appliance Firmware 10.0.0-124
NA
CVE-2013-3395
Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote malicious users to hijack the authentication ...
Cisco Email Security Appliance Firmware -Cisco Content Security Management Appliance -Cisco Web Security Appliance -
NA
CVE-2015-0624
The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote malicious users to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630...
Cisco Email Security Appliance Firmware -Cisco Content Security Management Appliance -Cisco Web Security Appliance -
5.8
CVSSv3
CVE-2017-3818
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote malicious user to bypass configured user filters on the device, aka a Malformed MIME Header Filte...
Cisco Email Security Appliance Firmware 9.7.1-066
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook