CS
Product
Content Security Management Appliance
27
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 15Low 0
Watch
Add Content Security Management Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2183 | 7.5 | Sep 1 | The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which… Affected: 9.6.6-068; 9.7.0-006 |
| CVE-2021-1447 | 6.7 | May 6 | A vulnerability in the user account management system of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, local attacker to… Affected: before 12.8.1-002; 13.0.0-249 before 13.8.1-068 |
| CVE-2021-1516 | 6.5 | May 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and… Affected: All versions, or not specified |
| CVE-2020-3447 | 6.5 | Aug 17 | A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an… Affected: before 13.6.1-201 |
| CVE-2018-0140 | 6.5 | Feb 8 | A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download… Affected: 10.0.0-096; 10.1.0-037; 10.1.0-052; 11.0.0-115 |
| CVE-2020-3178 | 6.1 | May 6 | Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to… Affected: before 13.6.0 |
| CVE-2018-15393 | 6.1 | Nov 8 | A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software could allow an unauthenticated, remote attacker to conduct a… Affected: All versions, or not specified |
| CVE-2017-6661 | 6.1 | Jun 13 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated,… Affected: 10.0.0-203; 10.1.0-049 |
| CVE-2016-1411 | 5.9 | Dec 14 | A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management… Affected: 9.1.0; 9.1.0-004; 9.1.0-031; 9.1.0-033; 9.1.0-103; 9.6.0 |
| CVE-2016-6416 | 5.9 | Oct 5 | The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and… Affected: 9.1.0; 9.1.0-004; 9.1.0-031; 9.1.0-033; 9.1.0-103; 9.5.0; +1 more |
| CVE-2021-1129 | 5.3 | Jan 20 | A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and… Affected: 12.5.0 |
| CVE-2019-1983 | 5.3 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA)… Affected: 11.4.0-812 |
| CVE-2020-3164 | 5.3 | Mar 4 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security… Affected: before 13.6.0 |
| CVE-2020-3117 | 4.7 | Sep 23 | A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated,… Affected: before 13.0.0-187 |
| CVE-2019-12635 | 4.3 | Sep 5 | A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access… Affected: before 12.5.0 |
| CVE-2017-6783 | 4.3 | Aug 17 | A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) could allow an… Affected: 10.1.0-037 |
| CVE-2015-6321 | – | Nov 6 | Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032,… Affected: 7.8.0-328; 7.8.1-001; 7.9.0-201; 7.9.2-116; 8.0.1-031; 8.1.0-001; +10 more |
| CVE-2015-6288 | – | Sep 14 | Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service (rapid log-file… Affected: 7.8_base |
| CVE-2015-4322 | – | Aug 19 | Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote… Affected: 8.3.6-039; 9.1.0-31; 9.1.0-103 |
| CVE-2015-4288 | – | Jul 29 | The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048… Affected: 8.3.6-048 |
| CVE-2015-0624 | – | Feb 21 | The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers… Affected: All versions, or not specified |
| CVE-2014-3289 | – | Jun 10 | Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch… Affected: All versions, or not specified |
| CVE-2014-2195 | – | May 20 | Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names,… Affected: All versions, or not specified |
| CVE-2014-2119 | – | Mar 21 | The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content… Affected: All versions, or not specified |
| CVE-2013-5537 | – | Oct 24 | The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state… Affected: All versions, or not specified |
| CVE-2013-3395 | – | Jul 2 | Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content… Affected: All versions, or not specified |
| CVE-2013-3396 | – | Jun 26 | Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) devices allows remote attackers to inject… Affected: All versions, or not specified |
Showing 27