Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe

Filtered by product Content Security Management Appliance

Total 28 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2015-4288	1 Cisco	3 Content Security Management Appliance, Email Security Appliance, Web Security Appliance	2024-11-21	4.3 MEDIUM	N/A
The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470.
CVE-2015-0624	1 Cisco	3 Content Security Management Appliance, Email Security Appliance Firmware, Web Security Appliance	2024-11-21	4.3 MEDIUM	N/A
The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and CSCur89639.
CVE-2014-3289	1 Cisco	4 Content Security Management Appliance, Email Security Appliance Firmware, Ironport Asyncos and 1 more	2024-11-21	4.3 MEDIUM	N/A
Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor/reports/overview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888.
CVE-2014-2195	1 Cisco	3 Asyncos, Content Security Management Appliance, Email Security Appliance Firmware	2024-11-21	4.3 MEDIUM	N/A
Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085.
CVE-2014-2119	1 Cisco	3 Content Security Management Appliance, Email Security Appliance Firmware, Ironport Asyncos	2024-11-21	8.5 HIGH	N/A
The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an FTP session that uploads a modified SLBL database file, aka Bug IDs CSCug79377 and CSCug80118.
CVE-2013-5537	1 Cisco	3 Content Security Management Appliance, Email Security Appliance Firmware, Web Security Appliance	2024-11-21	7.8 HIGH	N/A
The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.
CVE-2013-3396	1 Cisco	1 Content Security Management Appliance	2024-11-21	4.3 MEDIUM	N/A
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749.
CVE-2013-3395	1 Cisco	3 Content Security Management Appliance, Email Security Appliance Firmware, Web Security Appliance	2024-11-21	6.8 MEDIUM	N/A
Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuh70263, CSCuh70323, and CSCuh26634.