GCVE - cpe:2.3:o:cisco:ironport_asyncos:8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ironport_asyncos:8.0:*:*:*:*:*:*:*

part: o version: 8.0 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Ironport Asyncos (`a7349ce6-ab56-5b60-9ace-68fd1fa268b4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3289`	vulnerable	2026-06-08 05:05:32.074634	Details available Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor/reports/overview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888. Published: 2014-06-10T10:00:00.000Z Updated: 2024-08-06T10:35:57.192Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1030407 http://www.kb.cert.org/vuls/id/613308 http://packetstormsecurity.com/files/127004/Cisco-Ironport-Email-Security-Virtual-Appliance-8.0.0-671-XSS.html http://seclists.org/fulldisclosure/2014/Jun/57 http://tools.cisco.com/security/center/viewAlert.x?alertId=34569	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2119`	vulnerable	2026-06-08 05:05:27.644715	Details available The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an FTP session that uploads a modified SLBL database file, aka Bug IDs CSCug79377 and CSCug80118. Published: 2014-03-20T20:00:00.000Z Updated: 2024-08-06T10:05:59.702Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140319-asyncos	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3386`	vulnerable	2026-06-08 05:04:31.351375	Details available The IronPort Spam Quarantine (ISQ) component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers to cause a denial of service (service crash or hang) via a high rate of TCP connection attempts, aka Bug IDs CSCzv25573 and CSCzv81712. Published: 2013-06-27T21:00:00.000Z Updated: 2024-09-16T22:41:27.055Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-sma http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-esa	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.