Cisco Email Security Appliance (ESA) vulnerabilities

3 known vulnerabilities in Cisco Email Security Appliance (ESA) from Cisco. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Cisco Email Security Appliance (ESA): Improper Authentication

  CVE-2022-20798Jun 15, 2022CiscoEPSS 1.56%

  A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass

• 7.7 High severity

  Cisco Email Security Appliance (ESA): Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-20664Jun 15, 2022CiscoEPSS 1.05%

  A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote attacker to retrieve sensitive information

• 7.5 High severity

  A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification…

  CVE-2022-20653Feb 17, 2022CiscoEPSS 1.83%

  A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio