Priority MEDIUM 52
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an una…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01562 · Published 2022-06-15 · No fix listed CWE-287
Priority MEDIUM 47
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 pe…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01918 · Published 2020-09-23 · No fix listed CWE-20
Priority MEDIUM 44
A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02782 · Published 2018-08-15 · No fix listed CWE-20
Priority MEDIUM 42
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01378 · Published 2020-09-23 · No fix listed CWE-20
Priority MEDIUM 42
A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01413 · Published 2019-07-06 · No fix listed CWE-20
Priority MEDIUM 41
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.
CVSS 3.0HIGH 7.4· Network · No auth · User interaction · EPSS 0.0124 · Published 2019-07-06 · No fix listed CWE-20
Priority MEDIUM 40
A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause high CPU…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00843 · Published 2024-11-18 · No fix listed CWE-407
Priority LOW 39
libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03406 · Published 2016-06-08 · No fix listed CWE-119
Priority LOW 39
Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02764 · Published 2015-11-06 · No fix listed CWE-399
Priority LOW 38
A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated remote attacker to exh…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01563 · Published 2020-03-04 · No fix listed CWE-400
Priority LOW 38
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwar…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02995 · Published 2016-10-28 · No fix listed CWE-20
Priority LOW 38
A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacke…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02995 · Published 2016-10-28 · No fix listed CWE-19
Priority LOW 38
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affe…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03021 · Published 2016-10-28 · No fix listed CWE-20
Priority LOW 38
Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance (ESA) devices mishandles malformed fields during body-contains, attachment-contains, every-attachment…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01925 · Published 2015-11-06 · No fix listed CWE-20
Priority LOW 37
A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affect…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01087 · Published 2020-01-26 · Fixed in 13.0 CWE-20
Priority LOW 37
A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS)…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02163 · Published 2016-10-28 · No fix listed CWE-20
Priority LOW 37
A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass a configured drop f…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02419 · Published 2016-10-28 · No fix listed CWE-388
Priority LOW 37
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote att…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02419 · Published 2016-10-28 · No fix listed CWE-388
Priority LOW 36
A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker t…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02227 · Published 2023-02-16 · No fix listed CWE-20
Priority LOW 36
A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote att…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.0105 · Published 2022-06-15 · No fix listed CWE-497
Priority LOW 36
A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, re…
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.0067 · Published 2021-06-16 · No fix listed CWE-296
Priority LOW 36
A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliance…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01634 · Published 2016-10-28 · No fix listed CWE-20
Priority LOW 36
A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when the FTP application unexpectedly quits.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01747 · Published 2016-10-28 · No fix listed CWE-20
Priority LOW 35
A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0092 · Published 2022-11-03 · No fix listed CWE-400
Priority LOW 35
A vulnerability in the GZIP decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.
CVSS 3.0MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.01387 · Published 2019-06-20 · No fix listed CWE-20
Load more