cisco ironport asyncos vulnerabilities and exploits

(subscribe to this query)

NA

The admin web interface in Cisco AsyncOS 8.x prior to 8.0.8-113, 8.1.x and 8.5.x prior to 8.5.3-051, 8.6.x and 8.7.x prior to 8.7.0-171-LD, and 8.8.x prior to 8.8.0-085 on Web Security Appliance (WSA) devices allows remote authenticated users to obtain root privileges via crafted...

Cisco Web Security Appliance 8.5.0-497

6.5

CVSSv3

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to access sensit...

Cisco Content Security Management Appliance -Cisco Email Security Appliance -Cisco Web Security Appliance -Cisco Ironport Web Security Appliance 13.6.2-023 Cisco Ironport Web Security Appliance 14.0.0-090 Cisco Ironport Web Security Appliance 14.0.0-133 Cisco Ironport Web Security Appliance 14.0.0-292 Cisco Ironport Web Security Appliance 14.0.0-300

6.4

CVSSv3

Cisco IronPort Web Security Appliance AsyncOS software before 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks

Cisco Ironport Web Security Appliance

7.8

CVSSv3

A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated, local malicious user to escalate their privilege level and gain root access. The attacker has to have...

Cisco Asyncos 9.1.1-005 Cisco Asyncos 9.7.2-065

NA

Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA), allow remote malicious users to inject arbitrary web script or HTM...

Cisco Asyncos -

NA

The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote malicious users to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630...

Cisco Email Security Appliance Firmware -Cisco Content Security Management Appliance -Cisco Web Security Appliance -

NA

The proxy-cache implementation in Cisco AsyncOS 8.0.x prior to 8.0.7-151, 8.1.x and 8.5.x prior to 8.5.2-004, 8.6.x and 8.7.x prior to 8.7.0-171-LD, and 8.8.x prior to 8.8.0-085 on Web Security Appliance (WSA) devices allows remote malicious users to cause a denial of service (me...

Cisco Web Security Appliance 8.0.0-000 Cisco Web Security Appliance 8.0.5 Cisco Web Security Appliance 8.5.0.000 Cisco Web Security Appliance 8.5.0-497 Cisco Web Security Appliance 8.0.6-119 Cisco Web Security Appliance 8.0.6

NA

Cisco AsyncOS 8.x prior to 8.0.8-113, 8.1.x and 8.5.x prior to 8.5.3-051, 8.6.x and 8.7.x prior to 8.7.0-171-LD, and 8.8.x prior to 8.8.0-085 on Web Security Appliance (WSA) devices allows remote malicious users to cause a denial of service (memory consumption) via multiple file-...

Cisco Web Security Appliance 8.0.6 Cisco Web Security Appliance 8.5.0.000 Cisco Web Security Appliance 8.0.0-000 Cisco Web Security Appliance 8.0.8-mr-113 Cisco Web Security Appliance 8.0.7-142 Cisco Web Security Appliance 8.0.5 Cisco Web Security Appliance 8.5.2-024 Cisco Web Security Appliance 8.5.0-497 Cisco Web Security Appliance 8.0.6-078

NA

The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) prior to 7.6.3-023 and 8.x prior to 8.0.1-023 and Cisco Content Security Management Appliance (SMA) prior to 7.9.1-110 and 8.x prior to 8.1.1-013 allows remote authenti...

Cisco Ironport Asyncos 8.0 Cisco Ironport Asyncos Cisco Ironport Asyncos 8.1 Cisco Ironport Asyncos 8.0.1 Cisco Content Security Management Appliance -Cisco Email Security Appliance Firmware -

7.1

CVSSv3

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote malicious user to cause an affected device to run out of memory and stop scanning and forwarding email messages. When sys...

Cisco Asyncos 9.5 Cisco Asyncos 9.6 Cisco Asyncos 9.7 Cisco Asyncos 9.8 Cisco Asyncos 9.1 Cisco Asyncos 9.0 Cisco Asyncos 9.1.2

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook