Cisco Email Security Appliance 11.1.0-131
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:email_security_appliance:11.1.0-131:*:*:*:*:*:*:*
part: a version: 11.1.0-131 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Email Security Appliance (5cbe1f79-026e-57e1-8808-a03ce697a069) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1947 |
vulnerable | 2026-06-08 05:13:30.158091 |
Cisco Email Security Appliance Denial of Service Vulnerability
HIGH (8.6)
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of email messages that contain large attachments. An attacker could exploit this vulnerability by sending a malicious email message through the targeted device. A successful exploit could allow the attacker to cause a permanent DoS condition due to high CPU utilization. This vulnerability may require manual intervention to recover the ESA.
Published: 2020-09-23T00:26:01.117Z
Updated: 2024-11-13T18:05:34.136Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1844 |
vulnerable | 2026-06-08 05:13:29.716736 |
Cisco Email Security Appliance Filter Bypass Vulnerability
MEDIUM (5.3)
A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device. The vulnerability is due to improper detection of certain content sent to an affected device. An attacker could exploit this vulnerability by sending certain file types without Content-Disposition information to an affected device. A successful exploit could allow an attacker to send messages that contain malicious content to users.
Published: 2019-05-03T16:35:26.651Z
Updated: 2024-11-19T19:07:52.943Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.