ES
Product
Email Security Appliance Firmware
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 10Low 0
Watch
Add Email Security Appliance Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6406 | 9.8 | Sep 22 | Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment… Affected: 9.1.2-023; 9.1.2-028; 9.1.2-036; 9.7.2-046; 9.7.2-047; 9.7.2-054; +2 more |
| CVE-2018-15453 | 8.6 | Jan 10 | A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for… Affected: 11.0.1-401; 11.1.0-131 |
| CVE-2019-12706 | 7.5 | Oct 2 | A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote… Affected: before 13.5.0 |
| CVE-2019-1955 | 7.5 | Aug 8 | A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote… Affected: before 4.0mr1; 12.0 |
| CVE-2017-6671 | 7.5 | Jun 13 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: 9.7.1-066; 10.0.1-087 |
| CVE-2016-6458 | 7.5 | Nov 19 | A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass… Affected: 9.7.1-066; 9.7.2-046; 9.7.2-047; 9.7.2-054; 9.9.6-026; 9.9_base; +2 more |
| CVE-2019-15961 | 6.5 | Jan 15 | A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial… Affected: 11.1.1-042; 11.1.2-023 |
| CVE-2018-0140 | 6.5 | Feb 8 | A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download… Affected: 9.8.0-112; 10.0.1-087; 11.0.0-274 |
| CVE-2017-3827 | 5.8 | Feb 22 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA)… Affected: 9.9.6-026; 9.9.9-894; 10.0.0-082; 10.0.0-124; 10.0.0-125; 10.0.0-203; +1 more |
| CVE-2017-3818 | 5.8 | Feb 3 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated,… Affected: 9.7.1-066 |
| CVE-2022-20772 | 5.3 | Nov 3 | A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response… Affected: 13.5.1 before 14.0.3-015; 14.1 before 14.2.1-015; 14.3 before 14.3.0-023 |
| CVE-2019-15988 | 5.3 | Nov 26 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: through 12.5.0 |
| CVE-2017-12309 | 5.3 | Nov 16 | A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack Affected: 10.0.2-020; 11.0.0-105 |
| CVE-2016-6463 | 5.3 | Nov 19 | A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass… Affected: 9.7.0-125; 9.7.1-06; 10.0.0-082 |
| CVE-2016-6462 | 5.3 | Nov 19 | A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass… Affected: 9.7.1-06; 10.0.0-082; 10.0.0-125 |
| CVE-2019-15971 | 4.3 | Nov 26 | A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured… Affected: before 13.0 |
| CVE-2015-6309 | – | Oct 2 | Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service (file-descriptor consumption and device reload) via… Affected: 8.5.6-106 |
| CVE-2015-0732 | – | Jul 29 | Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and… Affected: 8.5.6-113; 9.1.0-032; 9.1.1-000; 9.6.0-000 |
| CVE-2015-4278 | – | Jul 16 | Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service (per-domain e-mail reception outage) by… Affected: 8.5.6-106; 9.5.0-201 |
| CVE-2015-4236 | – | Jul 10 | Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of… Affected: 8.5.6-073; 9.0.0-461 |
| CVE-2015-0734 | – | May 15 | Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8.5.6-106 allow remote attackers to inject arbitrary web script or HTML via… Affected: 8.5.6-106 |
| CVE-2015-0624 | – | Feb 21 | The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers… Affected: All versions, or not specified |
| CVE-2014-3289 | – | Jun 10 | Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch… Affected: All versions, or not specified |
| CVE-2014-2195 | – | May 20 | Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names,… Affected: All versions, or not specified |
| CVE-2014-2119 | – | Mar 21 | The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content… Affected: All versions, or not specified |
| CVE-2013-5537 | – | Oct 24 | The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state… Affected: All versions, or not specified |
| CVE-2013-3395 | – | Jul 2 | Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content… Affected: All versions, or not specified |
Showing 27