CVE-2022-20772

>= 13.5.1 and < 14.0.3-015

A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, rem

4.7MEDIUM

CVE-2019-15961

all versions

A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an un

7.5HIGH

CVE-2019-15988

<= 12.5.0

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could all

5.3MEDIUM

CVE-2019-15971

< 13.0

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unau

4.3MEDIUM

CVE-2019-12706

< 13.5.0

A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (E

7.5HIGH

CVE-2019-1955

< 4.0mr1

A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliances (

7.5HIGH

CVE-2018-15453

all versions

A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harv

8.6HIGH

CVE-2018-0140

all versions

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could all

6.5MEDIUM

CVE-2017-12309

all versions

A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a HTTP resp

5.3MEDIUM

CVE-2017-6671

all versions

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an un

7.5HIGH

CVE-2017-3827

all versions

A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security App

5.8MEDIUM

CVE-2017-3818

all versions

A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security App

5.8MEDIUM

CVE-2016-6463

all versions

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an

5.3MEDIUM

CVE-2016-6462

all versions

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an

5.3MEDIUM

CVE-2016-6458

all versions

A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow a

7.5HIGH

CVE-2016-6406

all versions

Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Secur

9.8CRITICAL

CVE-2015-6309

all versions

Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service (file-

CVE-2015-0732

all versions

Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance

CVE-2015-4278

all versions

Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of ser

CVE-2015-4236

all versions

Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enab

CVE-2015-0734

all versions

Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8.5.6-106 allow remote attackers t

CVE-2015-0624

all versions

The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Securit

CVE-2014-3289

all versions

Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.

CVE-2014-2195

all versions

Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is

CVE-2014-2119

all versions

The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 a

CVE-2013-5537

all versions

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance

CVE-2013-3395

all versions

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email