Ironport Email Security Appliances vulnerabilities

Product

Ironport Email Security Appliances

by Cisco · last CVE Dec 19, 2014

CVEs

On KEV

–

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 0Low 0

Severity

Exploitation

Watch

Add Ironport Email Security Appliances to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-8016	–	1%	Dec 19	The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption) via long Subject headers in e-mail messages, aka Bug ID… Affected: All versions, or not specified
CVE-2009-1162	–	1%	Jun 5	Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to… Affected: All versions, or not specified