Email Security Appliance Firmware (Cisco) - vulnerabilities (CVEs)
26 CVEs, 0 in the last 30 days, 112 known versions, newest CVE from 2022-11-04. Vendor: Cisco.
CVEs of Email Security Appliance Firmware
- CVE-2022-20772 - CVSS 5.3 (medium), 2022-11-04: A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an…
- CVE-2019-15961 - CVSS 7.5 (high), 2020-01-15: A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote…
- CVE-2019-15988 - CVSS 5.8 (medium), 2019-11-26: A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated,…
- CVE-2019-15971 - CVSS 5.8 (medium), 2019-11-26: A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker…
- CVE-2019-12706 - CVSS 7.5 (high), 2019-10-02: A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an…
- CVE-2019-1955 - CVSS 7.5 (high), 2019-08-08: A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an…
- CVE-2018-15453 - CVSS 8.6 (high), 2019-01-10: A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harvesting features of Cisco…
- CVE-2018-0140 - CVSS 6.5 (medium), 2018-02-08: A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote…
- CVE-2017-12309 - CVSS 5.3 (medium), 2017-11-16: A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The…
- CVE-2017-6671 - CVSS 7.5 (high), 2017-06-13: A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote…
- CVE-2017-3827 - CVSS 5.8 (medium), 2017-02-22: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web…
- CVE-2017-3818 - CVSS 5.8 (medium), 2017-02-03: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an…
- CVE-2016-6463 - CVSS 5.3 (medium), 2016-11-19: A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote…
- CVE-2016-6462 - CVSS 5.3 (medium), 2016-11-19: A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote…
- CVE-2016-6458 - CVSS 7.5 (high), 2016-11-19: A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote…
- CVE-2016-6406 - CVSS 9.8 (critical), 2016-09-22: Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices,…
- CVE-2015-6309 - CVSS 6.8 (medium), 2015-10-02: Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service (file-descriptor consumption and…
- CVE-2015-0732 - CVSS 4.3 (medium), 2015-07-29: Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032,…
- CVE-2015-4278 - CVSS 4.3 (medium), 2015-07-16: Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service (per-domain e-mail…
- CVE-2015-4236 - CVSS 4.3 (medium), 2015-07-10: Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers…
- CVE-2015-0734 - CVSS 4.3 (medium), 2015-05-15: Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8.5.6-106 allow remote attackers to inject arbitrary web…
- CVE-2015-0624 - CVSS 4.3 (medium), 2015-02-21: The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices…
- CVE-2014-3289 - CVSS 4.3 (medium), 2014-06-10: Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance…
- CVE-2014-2195 - CVSS 4.3 (medium), 2014-05-20: Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly…
- CVE-2014-2119 - CVSS 8.5 (high), 2014-03-21: The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and…
- CVE-2013-5537 - CVSS 7.8 (high), 2013-10-24: The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not…
- CVE-2013-3395 - CVSS 6.8 (medium), 2013-07-02: Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA)…
