Priority MEDIUM 40
A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause high CPU…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00843 · Published 2024-11-18 · No fix listed CWE-407
Priority LOW 31
Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00877 · Published 2023-02-16 · No fix listed CWE-77
Priority LOW 36
A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker t…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02227 · Published 2023-02-16 · No fix listed CWE-20
Priority LOW 35
A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0092 · Published 2022-11-03 · No fix listed CWE-400
Priority MEDIUM 52
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an una…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01562 · Published 2022-06-15 · No fix listed CWE-287
Priority LOW 36
A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote att…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.0105 · Published 2022-06-15 · No fix listed CWE-497
Priority LOW 36
A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, re…
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.0067 · Published 2021-06-16 · No fix listed CWE-296
Priority LOW 31
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security Appliance (WSA) could al…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01003 · Published 2021-05-06 · No fix listed CWE-540
Priority LOW 32
A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security Appliance (WSA) could a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01156 · Published 2021-01-20 · No fix listed CWE-201
Priority MEDIUM 47
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 pe…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01918 · Published 2020-09-23 · No fix listed CWE-20
Priority LOW 34
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attac…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01863 · Published 2020-09-23 · No fix listed CWE-20
Priority MEDIUM 42
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01378 · Published 2020-09-23 · No fix listed CWE-20
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0084 · Published 2020-09-23 · No fix listed CWE-79
Priority LOW 30
A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access sensiti…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00738 · Published 2020-08-17 · No fix listed CWE-532
Priority LOW 29
A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device.
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.01282 · Published 2020-07-16 · No fix listed CWE-20
Priority LOW 33
A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (SMA) could allow an un…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01281 · Published 2020-03-04 · No fix listed CWE-20
Priority LOW 38
A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated remote attacker to exh…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01563 · Published 2020-03-04 · No fix listed CWE-400
Priority LOW 29
A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of service (DoS) condit…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01508 · Published 2020-02-19 · No fix listed CWE-400
Priority LOW 37
A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affect…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01087 · Published 2020-01-26 · Fixed in 13.0 CWE-20
Priority MEDIUM 41
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.
CVSS 3.0HIGH 7.4· Network · No auth · User interaction · EPSS 0.0124 · Published 2019-07-06 · No fix listed CWE-20
Priority MEDIUM 42
A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01413 · Published 2019-07-06 · No fix listed CWE-20
Priority LOW 35
A vulnerability in the GZIP decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.
CVSS 3.0MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.01387 · Published 2019-06-20 · No fix listed CWE-20
Priority LOW 33
A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01696 · Published 2019-05-03 · Fixed in 11.1.1-030 CWE-20
Priority LOW 35
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.
CVSS 3.0MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.01647 · Published 2019-04-18 · No fix listed CWE-20
Priority LOW 34
A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass certain content filters on an affect…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02276 · Published 2018-10-05 · No fix listed CWE-284
Load more