Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

50 records

Priority MEDIUM 40

A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause high CPU…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00843 Published 2024-11-18 No fix listed CWE-407
TI-2023-06783 CVE-2023-20075 · GHSA-vwv2-hg2h-447m

Command injection in Cisco Secure Email

Priority LOW 31

Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00877 Published 2023-02-16 No fix listed CWE-77
Priority LOW 36

A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker t…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02227 Published 2023-02-16 No fix listed CWE-20
Priority LOW 35

A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2022-11-03 No fix listed CWE-400
Priority MEDIUM 52

A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an una…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01562 Published 2022-06-15 No fix listed CWE-287
Priority LOW 36

A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote att…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0105 Published 2022-06-15 No fix listed CWE-497
Priority LOW 36

A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, re…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.0067 Published 2021-06-16 No fix listed CWE-296
Priority LOW 31

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security Appliance (WSA) could al…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01003 Published 2021-05-06 No fix listed CWE-540
Priority MEDIUM 47

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 pe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01918 Published 2020-09-23 No fix listed CWE-20
Priority LOW 34

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attac…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01863 Published 2020-09-23 No fix listed CWE-20
Priority MEDIUM 42

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01378 Published 2020-09-23 No fix listed CWE-20
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0084 Published 2020-09-23 No fix listed CWE-79
Priority LOW 30

A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access sensiti…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00738 Published 2020-08-17 No fix listed CWE-532
Priority LOW 29

A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.01282 Published 2020-07-16 No fix listed CWE-20
Priority LOW 33

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (SMA) could allow an un…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01281 Published 2020-03-04 No fix listed CWE-20
Priority LOW 38

A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated remote attacker to exh…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01563 Published 2020-03-04 No fix listed CWE-400
Priority LOW 29

A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of service (DoS) condit…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01508 Published 2020-02-19 No fix listed CWE-400
Priority MEDIUM 41

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.

CVSS 3.0HIGH 7.4 Network No auth User interaction EPSS 0.0124 Published 2019-07-06 No fix listed CWE-20
Priority MEDIUM 42

A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01413 Published 2019-07-06 No fix listed CWE-20
Priority LOW 35

A vulnerability in the GZIP decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.01387 Published 2019-06-20 No fix listed CWE-20
Priority LOW 33

A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01696 Published 2019-05-03 Fixed in 11.1.1-030 CWE-20
Priority LOW 35

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.01647 Published 2019-04-18 No fix listed CWE-20
Priority LOW 34

A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass certain content filters on an affect…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02276 Published 2018-10-05 No fix listed CWE-284
Load more