ES
Product
Email Security Appliance
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 19Medium 23Low 0
Watch
Add Email Security Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1947 | 8.6 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause… Affected: 11.1.0-131 |
| CVE-2022-20664 | 7.7 | Jun 15 | A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA)… Affected: before 14.0.2-020 |
| CVE-2020-3548 | 7.5 | Nov 18 | A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an… Affected: through 13.5.1-277 |
| CVE-2022-20960 | 7.5 | Nov 3 | A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on… Affected: before 14.2.1-015; 14.3.0 before 14.3.0-020 |
| CVE-2020-3133 | 7.5 | Sep 23 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 13.0 |
| CVE-2019-1921 | 7.5 | Jul 6 | A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured… Affected: 12.0.0-419 |
| CVE-2018-0419 | 7.5 | Aug 15 | A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass the filtering… Affected: All versions, or not specified |
| CVE-2016-6372 | 7.5 | Oct 28 | A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security… Affected: 8.0.1-023; 8.0_base; 8.5.0-000; 8.5.0-er1-198; 8.5.6-052; 8.5.6-073; +29 more |
| CVE-2016-6360 | 7.5 | Oct 28 | A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to… Affected: 9.5.0-000; 9.5.0-201; 9.6.0-000; 9.6.0-042; 9.6.0-051; 9.7.0-125 |
| CVE-2016-6358 | 7.5 | Oct 28 | A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when… Affected: 9.7.1-066; 9.7.2-046; 9.7.2-047; 9.7.2-054; 9.9.6-026; 9.9_base |
| CVE-2016-6357 | 7.5 | Oct 28 | A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated,… Affected: 9.7.1-066; 9.9.6-026 |
| CVE-2016-6356 | 7.5 | Oct 28 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an… Affected: 3.3.1-09; 7.1.0; 7.1.1; 7.1.2; 7.1.3; 7.1.4; +34 more |
| CVE-2016-1486 | 7.5 | Oct 28 | A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could… Affected: 8.5.0-000; 8.5.0-er1-198; 8.5.6-052; 8.5.6-073; 8.5.6-074; 8.5.6-106; +24 more |
| CVE-2016-1481 | 7.5 | Oct 28 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a… Affected: 8.5.0-000; 8.5.0-er1-198; 8.5.6-052; 8.5.6-073; 8.5.6-074; 8.5.6-106; +24 more |
| CVE-2016-1480 | 7.5 | Oct 28 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA)… Affected: 8.0.1-023; 8.0_base; 8.5.0-000; 8.5.0-er1-198; 8.5.6-052; 8.5.6-073; +25 more |
| CVE-2016-1405 | 7.5 | Jun 8 | libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance… Affected: 9.6.0-042 |
| CVE-2021-1566 | 7.4 | Jun 16 | A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance… Affected: All versions, or not specified |
| CVE-2019-1933 | 7.4 | Jul 6 | A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: 11.1.2-023 |
| CVE-2023-20009 | 7.2 | Mar 1 | A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote… Affected: before 12.5.3-041; 13.0.0 before 13.0.5-007; 13.5.0 before 13.5.4-038; 14.0.0 before 14.2.1-020; 14.3.0 before 14.3.0-032 |
Showing 19