ES
Product
Email Security Appliance
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 19Medium 23Low 0
Watch
Add Email Security Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20798 | 9.8 | Jun 15 | A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email… Affected: 14.0 before 14.0.1-033; 7.1.5 |
| CVE-2019-1947 | 8.6 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause… Affected: 11.1.0-131 |
| CVE-2022-20664 | 7.7 | Jun 15 | A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA)… Affected: before 14.0.2-020 |
| CVE-2020-3548 | 7.5 | Nov 18 | A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an… Affected: through 13.5.1-277 |
| CVE-2022-20960 | 7.5 | Nov 3 | A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on… Affected: before 14.2.1-015; 14.3.0 before 14.3.0-020 |
| CVE-2020-3133 | 7.5 | Sep 23 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 13.0 |
| CVE-2019-1921 | 7.5 | Jul 6 | A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured… Affected: 12.0.0-419 |
| CVE-2018-0419 | 7.5 | Aug 15 | A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass the filtering… Affected: All versions, or not specified |
| CVE-2016-6372 | 7.5 | Oct 28 | A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security… Affected: 8.0.1-023; 8.0_base; 8.5.0-000; 8.5.0-er1-198; 8.5.6-052; 8.5.6-073; +29 more |
| CVE-2016-6360 | 7.5 | Oct 28 | A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to… Affected: 9.5.0-000; 9.5.0-201; 9.6.0-000; 9.6.0-042; 9.6.0-051; 9.7.0-125 |
| CVE-2016-6358 | 7.5 | Oct 28 | A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when… Affected: 9.7.1-066; 9.7.2-046; 9.7.2-047; 9.7.2-054; 9.9.6-026; 9.9_base |
| CVE-2016-6357 | 7.5 | Oct 28 | A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated,… Affected: 9.7.1-066; 9.9.6-026 |
| CVE-2016-6356 | 7.5 | Oct 28 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an… Affected: 3.3.1-09; 7.1.0; 7.1.1; 7.1.2; 7.1.3; 7.1.4; +34 more |
| CVE-2016-1486 | 7.5 | Oct 28 | A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could… Affected: 8.5.0-000; 8.5.0-er1-198; 8.5.6-052; 8.5.6-073; 8.5.6-074; 8.5.6-106; +24 more |
| CVE-2016-1481 | 7.5 | Oct 28 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a… Affected: 8.5.0-000; 8.5.0-er1-198; 8.5.6-052; 8.5.6-073; 8.5.6-074; 8.5.6-106; +24 more |
| CVE-2016-1480 | 7.5 | Oct 28 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA)… Affected: 8.0.1-023; 8.0_base; 8.5.0-000; 8.5.0-er1-198; 8.5.6-052; 8.5.6-073; +25 more |
| CVE-2016-1405 | 7.5 | Jun 8 | libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance… Affected: 9.6.0-042 |
| CVE-2021-1566 | 7.4 | Jun 16 | A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance… Affected: All versions, or not specified |
| CVE-2019-1933 | 7.4 | Jul 6 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: 11.1.2-023 |
| CVE-2023-20009 | 7.2 | Mar 1 | A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote… Affected: before 12.5.3-041; 13.0.0 before 13.0.5-007; 13.5.0 before 13.5.4-038; 14.0.0 before 14.2.1-020; 14.3.0 before 14.3.0-032 |
| CVE-2023-20075 | 6.7 | Mar 1 | Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands Affected: 12.5.0 before 12.5.3-041; 13.0.0 before 13.0.5-007; 13.5.0 before 13.5.4-038; 14.0.0 before 14.2.1-020; 14.3.0 before 14.3.0-032 |
| CVE-2021-1516 | 6.5 | May 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and… Affected: All versions, or not specified |
| CVE-2020-3447 | 6.5 | Aug 17 | A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an… Affected: before 13.5.1 |
| CVE-2020-3181 | 6.5 | Mar 4 | A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow… Affected: before 13.0.0 |
| CVE-2020-3134 | 6.5 | Jan 26 | A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a… Affected: before 13.0 |
| CVE-2020-3137 | 6.1 | Sep 23 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: through 13.0.0 |
| CVE-2017-6661 | 6.1 | Jun 13 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated,… Affected: 10.0.0-203; 10.1.0-049 |
| CVE-2016-9202 | 6.1 | Dec 14 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent… Affected: 9.1.1-036; 9.1.2-023; 9.1.2-028; 9.1.2-036; 9.4.0; 9.4.4-000; +10 more |
| CVE-2016-1423 | 6.1 | Oct 28 | A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated,… Affected: 8.9.0; 8.9.1-000; 8.9.2-032; 9.0.0; 9.0.0-212; 9.0.0-461; +5 more |
| CVE-2020-3132 | 5.9 | Feb 19 | A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a… Affected: before 12.5.1-037; before 13.0.0-375 |
| CVE-2016-1411 | 5.9 | Dec 14 | A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management… Affected: 7.5.2-201; 7.5.2-hp2-303; 7.6.3-025; 8.0.1-023; 8.5.0-000; 8.5.0-er1-198; +1 more |
| CVE-2016-6416 | 5.9 | Oct 5 | The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and… Affected: 9.6.0-000; 9.6.0-042; 9.6.0-051; 9.7.1-066; 9.9.6-026; 9.9_base |
| CVE-2020-3370 | 5.8 | Jul 16 | A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device Affected: before 13.0.1; 13.5.0 before 13.5.1 |
| CVE-2019-1905 | 5.8 | Jun 20 | A vulnerability in the GZIP decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: 11.1.2; 12.0.0 |
| CVE-2017-3800 | 5.8 | Jan 26 | A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: 9.7.1-066; 9.7.1-hp2-207; 9.8.5-085 |
| CVE-2021-1129 | 5.3 | Jan 20 | A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and… Affected: 13.0.0 |
| CVE-2019-1983 | 5.3 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA)… Affected: 11.0.1-hp5-602; 11.1.0-404 |
| CVE-2020-3164 | 5.3 | Mar 4 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security… Affected: through 13.0.0-392 |
| CVE-2019-1844 | 5.3 | May 3 | A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering… Affected: 11.1.0-131 |
| CVE-2019-1831 | 5.3 | Apr 18 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: 11.1.2-023; 12.0.0-208 |
| CVE-2018-0447 | 5.3 | Oct 5 | A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to… Affected: All versions, or not specified |
| CVE-2017-6783 | 4.3 | Aug 17 | A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) could allow an… Affected: 9.7.2-065 |
| CVE-2016-6465 | 4.3 | Dec 14 | A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances and Cisco Web Security Appliances could allow an… Affected: 8.5.7-042; 9.7.2-047; 10.0.0-125; 10.0.0-232 |
| CVE-2015-6321 | – | Nov 6 | Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032,… Affected: 7.6.1-000; 7.6.3-000; 7.7.0-000; 7.7.1-000; 7.8.0-311; 8.5.6-052; +8 more |
| CVE-2015-6291 | – | Nov 6 | Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance (ESA) devices mishandles malformed fields during… Affected: 7.7.0-000; 7.7.1-000; 8.0_base; 8.5.6-052; 8.5.6-073; 8.5.6-074; +10 more |
| CVE-2015-6309 | – | Oct 2 | Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service (file-descriptor consumption and device reload) via… Affected: 9.6.0-042 |
| CVE-2015-6285 | – | Sep 14 | Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via… Affected: 7.6.0; 8.0.0 |
| CVE-2015-4288 | – | Jul 29 | The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048… Affected: 8.5.7-042 |
| CVE-2015-4236 | – | Jul 10 | Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of… Affected: 8.5.6-074 |
| CVE-2015-4184 | – | Jun 13 | The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a… Affected: 3.331-09; 7.5.1-gpl-022; 8.5.6-074 |
Showing 50