Cisco

Email Security Appliance Firmware

26 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2015-0624

Exploit
  • EPSS 0.15%
  • Veröffentlicht 21.02.2015 11:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412...

4.3

CVE-2014-3289

Exploit
  • EPSS 0.66%
  • Veröffentlicht 10.06.2014 11:19:35
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 an...

4.3

CVE-2014-2195

  • EPSS 0.32%
  • Veröffentlicht 20.05.2014 11:13:37
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group...

8.5

CVE-2014-2119

  • EPSS 1.37%
  • Veröffentlicht 21.03.2014 01:04:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 ...

7.8

CVE-2013-5537

  • EPSS 0.39%
  • Veröffentlicht 24.10.2013 10:53:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a d...

6.8

CVE-2013-3395

  • EPSS 0.12%
  • Veröffentlicht 02.07.2013 03:43:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hi...