Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

email security appliance firmware vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2016-6458
A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to bypass content filters configured on an affected device. Email that should have been filtered could instea...
Cisco Email Security Appliance Firmware 9.7.2-047Cisco Email Security Appliance Firmware 9.7.2-054Cisco Email Security Appliance Firmware 9.7.1-066Cisco Email Security Appliance Firmware 9.7.2-046Cisco Email Security Appliance Firmware 10.0.0-124Cisco Email Security Appliance Firmware 10.0.0-125Cisco Email Security Appliance Firmware 9.9 BaseCisco Email Security Appliance Firmware 9.9.6-026
5
CVSSv2
CVE-2016-6462
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to bypass Advanced Malware Protection (AMP) filters that are configured for an affected device. This vulnerabil...
Cisco Email Security Appliance Firmware 10.0.0-125Cisco Email Security Appliance Firmware 10.0.0-082Cisco Email Security Appliance Firmware 9.7.1-06
5
CVSSv2
CVE-2016-6463
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote malicious user to bypass Advanced Malware Protection (AMP) filters that are configured for an affected device. This vulnerabil...
Cisco Email Security Appliance Firmware 9.7.1-06Cisco Email Security Appliance Firmware 10.0.0-082Cisco Email Security Appliance Firmware 9.7.0-125
4.3
CVSSv2
CVE-2015-0732
Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote malicious users to injec...
Cisco Web Security Appliance 9.0.0-193Cisco Content Security Management Virtual Appliance 9.1.0-033Cisco Email Security Appliance Firmware 8.5.6-113Cisco Email Security Appliance Firmware 9.6.0-000Cisco Email Security Appliance Firmware 9.1.0-032Cisco Email Security Appliance Firmware 9.1.1-000
4.3
CVSSv2
CVE-2015-4236
Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote malicious users to cause a denial of service (clustering and SSH outage) via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636.
Cisco Email Security Appliance Firmware 8.5.6-073Cisco Email Security Appliance Firmware 9.0.0-461Cisco Email Security Appliance 8.5.6-074
4.3
CVSSv2
CVE-2015-4278
Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote malicious users to cause a denial of service (per-domain e-mail reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806.
Cisco Email Security Appliance Firmware 9.5.0-201Cisco Email Security Appliance Firmware 8.5.6-106
5
CVSSv2
CVE-2017-3827
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote malicious user to bypass configured user filters on the device....
Cisco Web Security Appliance 10.0.0-082Cisco Web Security Appliance 10.0.0-125Cisco Email Security Appliance Firmware 9.9.6-026Cisco Email Security Appliance Firmware 10.0.0-082Cisco Web Security Appliance 10.0.0-124Cisco Email Security Appliance Firmware 10.0.0-232Cisco Email Security Appliance Firmware 9.9.9-894Cisco Email Security Appliance Firmware 10.0.0-203Cisco Web Security Appliance 10.0.0-232Cisco Web Security Appliance 10.0.0-203Cisco Email Security Appliance Firmware 10.0.0-125Cisco Email Security Appliance Firmware 10.0.0-124
6.8
CVSSv2
CVE-2013-3395
Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote malicious users to hijack the authentication ...
Cisco Email Security Appliance Firmware -Cisco Content Security Management Appliance -Cisco Web Security Appliance -
4.3
CVSSv2
CVE-2015-0624
The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote malicious users to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630...
Cisco Email Security Appliance Firmware -Cisco Content Security Management Appliance -Cisco Web Security Appliance -
4.3
CVSSv2
CVE-2015-0734
Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8.5.6-106 allow remote malicious users to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCut87743.
Cisco Email Security Appliance Firmware 8.5.6-106
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook