Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

50 records in Email Security Appliance · all components

Priority MEDIUM 52

A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an una…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01562 Published 2022-06-15 No fix listed CWE-287
Priority MEDIUM 47

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 pe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01918 Published 2020-09-23 No fix listed CWE-20
Priority MEDIUM 44

A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02782 Published 2018-08-15 No fix listed CWE-20
Priority MEDIUM 42

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01378 Published 2020-09-23 No fix listed CWE-20
Priority MEDIUM 42

A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01413 Published 2019-07-06 No fix listed CWE-20
Priority MEDIUM 41

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.

CVSS 3.0HIGH 7.4 Network No auth User interaction EPSS 0.0124 Published 2019-07-06 No fix listed CWE-20
Priority MEDIUM 40

A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause high CPU…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00843 Published 2024-11-18 No fix listed CWE-407
Priority LOW 38

A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated remote attacker to exh…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01563 Published 2020-03-04 No fix listed CWE-400
Priority LOW 38

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwar…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02995 Published 2016-10-28 No fix listed CWE-20
Priority LOW 38

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affe…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03021 Published 2016-10-28 No fix listed CWE-20
Priority LOW 38

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance (ESA) devices mishandles malformed fields during body-contains, attachment-contains, every-attachment…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01925 Published 2015-11-06 No fix listed CWE-20
Priority LOW 37

A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS)…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02163 Published 2016-10-28 No fix listed CWE-20
Priority LOW 36

A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker t…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02227 Published 2023-02-16 No fix listed CWE-20
Priority LOW 36

A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote att…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0105 Published 2022-06-15 No fix listed CWE-497
Priority LOW 36

A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, re…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.0067 Published 2021-06-16 No fix listed CWE-296
Priority LOW 36

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliance…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01634 Published 2016-10-28 No fix listed CWE-20
Priority LOW 36

A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when the FTP application unexpectedly quits.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01747 Published 2016-10-28 No fix listed CWE-20
Priority LOW 35

A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2022-11-03 No fix listed CWE-400
Priority LOW 35

A vulnerability in the GZIP decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.01387 Published 2019-06-20 No fix listed CWE-20
Load more
Open these records in search →