Cisco Email Security Appliance Firmware -
Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:email_security_appliance_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Email Security Appliance Firmware (9c13dc20-85ca-5738-b0c5-c01bda68ce4d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-1438 |
not_vulnerable | 2026-06-08 05:07:31.344297 |
Details available
Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210.
Published: 2016-06-23T00:00:00.000Z
Updated: 2024-08-05T22:55:14.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0624 |
vulnerable | 2026-06-08 05:06:21.893081 |
Details available
The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and CSCur89639.
Published: 2015-02-21T11:00:00.000Z
Updated: 2024-08-06T04:17:32.374Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0605 |
not_vulnerable | 2026-06-08 05:06:21.842624 |
Details available
The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343.
Published: 2015-02-07T02:00:00.000Z
Updated: 2024-08-06T04:17:32.406Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3289 |
vulnerable | 2026-06-08 05:05:32.074652 |
Details available
Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor/reports/overview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888.
Published: 2014-06-10T10:00:00.000Z
Updated: 2024-08-06T10:35:57.192Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2195 |
vulnerable | 2026-06-08 05:05:27.858072 |
Details available
Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085.
Published: 2014-05-20T10:00:00.000Z
Updated: 2024-08-06T10:05:59.853Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2119 |
vulnerable | 2026-06-08 05:05:27.647213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5537 |
vulnerable | 2026-06-08 05:04:52.064119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3395 |
vulnerable | 2026-06-08 05:04:31.365245 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3386 |
not_vulnerable | 2026-06-08 05:04:31.351455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3385 |
not_vulnerable | 2026-06-08 05:04:31.348212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3384 |
not_vulnerable | 2026-06-08 05:04:31.347560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.