cisco content security management appliance vulnerabilities and exploits

(subscribe to this query)

5.5

CVSSv2

Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a...

Cisco Content Security Management Appliance 8.3.6-039 Cisco Content Security Management Appliance 9.1.0-31 Cisco Content Security Management Appliance 9.1.0-103

4.3

CVSSv2

The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to cause a denial of service...

Cisco Content Security Management Appliance 9.1.0 Cisco Content Security Management Appliance 9.1.0-004 Cisco Content Security Management Appliance 9.1.0-031 Cisco Content Security Management Appliance 9.1.0-033 Cisco Content Security Management Appliance 9.1.0-103 Cisco Content Security Management Appliance 9.5.0 Cisco Content Security Management Appliance 9.6.0 Cisco Email Security Appliance 9.6.0-000 Cisco Email Security Appliance 9.6.0-042 Cisco Email Security Appliance 9.6.0-051 Cisco Email Security Appliance 9.7.1-066 Cisco Email Security Appliance 9.9.6-026 Cisco Email Security Appliance 9.9 Base Cisco Web Security Appliance 9.0.0-162 Cisco Web Security Appliance 9.1.0-000 Cisco Web Security Appliance 9.1.0-070 Cisco Web Security Appliance 9.1 Base Cisco Web Security Appliance 9.5.0-235 Cisco Web Security Appliance 9.5.0-284 Cisco Web Security Appliance 9.5.0-444 Cisco Web Security Appliance 9.5 Base

4.3

CVSSv2

A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SMA) could allow an unauthenticated, remote attacker to impersonate the update...

Cisco Content Security Management Appliance 9.1.0 Cisco Content Security Management Appliance 9.1.0-004 Cisco Content Security Management Appliance 9.1.0-031 Cisco Content Security Management Appliance 9.1.0-033 Cisco Content Security Management Appliance 9.1.0-103 Cisco Content Security Management Appliance 9.6.0 Cisco Email Security Appliance 7.5.2-201 Cisco Email Security Appliance 7.5.2-hp2-303 Cisco Email Security Appliance 7.6.3-025 Cisco Email Security Appliance 8.0.1-023 Cisco Email Security Appliance 8.5.0-000 Cisco Email Security Appliance 8.5.0-er1-198 Cisco Email Security Appliance 8.5.1-021 Cisco Web Security Appliance 7.7.0-608 Cisco Web Security Appliance 7.7.5-835 Cisco Web Security Appliance 8.8.0-000

7.8

CVSSv2

Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance (SMA)...

Cisco Web Security Appliance 5.6.0-623 Cisco Web Security Appliance 6.0.0-000 Cisco Web Security Appliance 7.5.0-000 Cisco Web Security Appliance 7.5.0-825 Cisco Web Security Appliance 7.5.1-000 Cisco Web Security Appliance 7.5.2-000 Cisco Web Security Appliance 7.7.0-000 Cisco Web Security Appliance 7.7.1-000 Cisco Web Security Appliance 8.0.0-000 Cisco Web Security Appliance 8.5.0.000 Cisco Content Security Management Appliance 7.8.0-328 Cisco Content Security Management Appliance 7.8.1-001 Cisco Content Security Management Appliance 7.9.0-201 Cisco Content Security Management Appliance 7.9.2-116 Cisco Content Security Management Appliance 8.0.1-031 Cisco Content Security Management Appliance 8.1.0-001 Cisco Content Security Management Appliance 8.1.1-033 Cisco Content Security Management Appliance 8.1.2-000 Cisco Content Security Management Appliance 8.2.0-238 Cisco Content Security Management Appliance 8.3.0-350 Cisco Content Security Management Appliance 8.3.5-061 Cisco Content Security Management Appliance 8.3.6-014 Cisco Content Security Management Appliance 8.3.7-010 Cisco Content Security Management Appliance 8.4.0-150 Cisco Content Security Management Appliance 9.0.0-073 Cisco Content Security Management Appliance 9.1.0-004 Cisco Email Security Appliance 7.6.1-000 Cisco Email Security Appliance 7.6.3-000 Cisco Email Security Appliance 7.7.0-000 Cisco Email Security Appliance 7.7.1-000 Cisco Email Security Appliance 7.8.0-311 Cisco Email Security Appliance 8.5.6-052 Cisco Email Security Appliance 8.6.0-011 Cisco Email Security Appliance 8.9.1-000 Cisco Email Security Appliance 8.9.2-032 Cisco Email Security Appliance 9.0.0-212 Cisco Email Security Appliance 9.0.5-000 Cisco Email Security Appliance 9.1.0-011 Cisco Email Security Appliance 9.4.4-000 Cisco Email Security Appliance 9.5.0-000

4.3

CVSSv2

A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based...

Cisco Content Security Management Appliance 10.0.0-203 Cisco Content Security Management Appliance 10.1.0-049 Cisco Email Security Appliance 10.0.0-203 Cisco Email Security Appliance 10.1.0-049

4

CVSSv2

A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is...

Cisco Content Security Management Appliance Cisco Email Security Appliance

4.3

CVSSv2

The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630,...

Cisco Content Security Management Appliance -Cisco Web Security Appliance -Cisco Email Security Appliance Firmware -

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of...

Cisco Content Security Management Appliance -Cisco Web Security Appliance -Cisco Email Security Appliance Firmware -

5

CVSSv2

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated remote attacker to cause high CPU usage on an...

Cisco Cloud Email Security Cisco Content Security Management Appliance Cisco Email Security Appliance Cisco Web Security Appliance

3.5

CVSSv2

A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role...

Cisco Content Security Management Appliance

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook