Read the docs
TI-2016-05448 Aliases CVE-2016-6360GHSA-wj9f-9jrq-c6wp

Improper input validation in Cisco AsyncOS through WSA10.0.0-000

Priority LOW 37CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to the AMP process unexpectedly restarting. Affected Products: Cisco AsyncOS Software for Email Security Appliances (ESA) versions 9.5 and later up to the first fixed release, Cisco AsyncOS Software for Web Security Appliances (WSA) all versions prior to the first fixed release. More Information: CSCux56406, CSCux59928. Known Affected Releases: 9.6.0-051 9.7.0-125 8.8.0-085 9.5.0-444 WSA10.0.0-000. Known Fixed Releases: 9.7.1-066 WSA10.0.0-233.

Why it matters now

EPSS 0.02163 82nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco AsyncOS through WSA10.0.0-000Cisco AsyncOS through WSA10.0.0-000—No fix listedCNA
  • Cisco AsyncOS through WSA10.0.0-000 Vendor— Affected Cisco AsyncOS through WSA10.0.0-000 Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:a:cisco:email_security_appliance:9.5.0-000:*:*:*:*:*:*:*9.5.0-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.5.0-201:*:*:*:*:*:*:*9.5.0-201VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.6.0-000:*:*:*:*:*:*:*9.6.0-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.6.0-042:*:*:*:*:*:*:*9.6.0-042VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.6.0-051:*:*:*:*:*:*:*9.6.0-051VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.7.0-125:*:*:*:*:*:*:*9.7.0-125VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:8.8.0-085:*:*:*:*:*:*:*8.8.0-085VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:9.0.0-193:*:*:*:*:*:*:*9.0.0-193VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:9.0_base:*:*:*:*:*:*:*9.0_baseVulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:9.1.0-000:*:*:*:*:*:*:*9.1.0-000VulnerableCisco
  • cpe:2.3:a:cisco:email_security_appliance:9.5.0-000:*:*:*:*:*:*:* Versions 9.5.0-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.5.0-201:*:*:*:*:*:*:* Versions 9.5.0-201 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.6.0-000:*:*:*:*:*:*:* Versions 9.6.0-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.6.0-042:*:*:*:*:*:*:* Versions 9.6.0-042 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.6.0-051:*:*:*:*:*:*:* Versions 9.6.0-051 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.7.0-125:*:*:*:*:*:*:* Versions 9.7.0-125 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:8.8.0-085:*:*:*:*:*:*:* Versions 8.8.0-085 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:9.0.0-193:*:*:*:*:*:*:* Versions 9.0.0-193 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:9.0_base:*:*:*:*:*:*:* Versions 9.0_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:9.1.0-000:*:*:*:*:*:*:* Versions 9.1.0-000 Vulnerable ·Cisco
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:web_security_appliance:9.1.0-070:*:*:*:*:*:*:*9.1.0-070VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:9.1_base:*:*:*:*:*:*:*9.1_baseVulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:9.5.0-235:*:*:*:*:*:*:*9.5.0-235VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:9.5.0-284:*:*:*:*:*:*:*9.5.0-284VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:9.5.0-444:*:*:*:*:*:*:*9.5.0-444VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:9.5_base:*:*:*:*:*:*:*9.5_baseVulnerableCisco
  • cpe:2.3:a:cisco:web_security_appliance:9.1.0-070:*:*:*:*:*:*:* Versions 9.1.0-070 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:9.1_base:*:*:*:*:*:*:* Versions 9.1_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:9.5.0-235:*:*:*:*:*:*:* Versions 9.5.0-235 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:9.5.0-284:*:*:*:*:*:*:* Versions 9.5.0-284 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:9.5.0-444:*:*:*:*:*:*:* Versions 9.5.0-444 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:9.5_base:*:*:*:*:*:*:* Versions 9.5_base Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-6360
  2. 2026-10-03 Alias added: GHSA-wj9f-9jrq-c6wp

References

Advisory 1

  • TI-2022-05357 Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2019-01567 Cisco Email Security Appliance Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2018-00378 Improper input validation in Cisco Email Security Appliance CVSS 3.0HIGH 7.5
  • TI-2020-02695 Cisco Email Security Appliance Content Filter Bypass Vulnerability CVSS 3.1HIGH 7.5
  • TI-2019-01541 Cisco Email Security Appliance Content Filter Bypass Vulnerability CVSS 3.0HIGH 7.5
  • TI-2019-01553 Cisco Email Security Appliance Content Filter Bypass Vulnerability CVSS 3.0HIGH 7.4
See all 49 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences