Email Security Appliance vulnerabilities
4 known vulnerabilities in Email Security Appliance from Cisco. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Cisco Secure Email: Unrestricted Upload of File with Dangerous Type
A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gai
- 7.5 High severity
Cisco Secure Email: Improper Certificate Validation
A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain TLS
- 9.8 Critical severity
Cisco Email Security Appliance (ESA): Improper Authentication
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass
- 7.7 High severity
Cisco Email Security Appliance (ESA): Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote attacker to retrieve sensitive information