content_security_management_appliance vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to access sensit...

Cisco Content Security Management Appliance -Cisco Email Security Appliance -Cisco Web Security Appliance -Cisco Ironport Web Security Appliance 13.6.2-023 Cisco Ironport Web Security Appliance 14.0.0-090 Cisco Ironport Web Security Appliance 14.0.0-133 Cisco Ironport Web Security Appliance 14.0.0-292 Cisco Ironport Web Security Appliance 14.0.0-300

6.5

CVSSv3

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote malicious user to download any message from the spam quarantine by modifying browser string information. The vulnerability...

Cisco Email Security Appliance Firmware 9.8.0-112 Cisco Email Security Appliance Firmware 10.0.1-087 Cisco Email Security Appliance Firmware 11.0.0-274 Cisco Content Security Management Appliance 10.0.0-096 Cisco Content Security Management Appliance 10.1.0-037 Cisco Content Security Management Appliance 10.1.0-052 Cisco Content Security Management Appliance 11.0.0-115

NA

Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and previous versions, and Content Security Management Appliance (SMA) 8.3 and previous versions ...

Cisco Ironport Asyncos Cisco Web Security Appliance -Cisco Content Security Management Appliance -Cisco Ironport Asyncos 8.0 Cisco Email Security Appliance Firmware -

NA

Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote malicious users to gain role privileges by leveraging group-name similarity, aka Bu...

Cisco Asyncos -Cisco Content Security Management Appliance -Cisco Email Security Appliance Firmware -

NA

The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) prior to 7.6.3-023 and 8.x prior to 8.0.1-023 and Cisco Content Security Management Appliance (SMA) prior to 7.9.1-110 and 8.x prior to 8.1.1-013 allows remote authenti...

Cisco Ironport Asyncos 8.0 Cisco Ironport Asyncos Cisco Ironport Asyncos 8.1 Cisco Ironport Asyncos 8.0.1 Cisco Content Security Management Appliance -Cisco Email Security Appliance Firmware -

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook