CVE-2014-3289

CVE-2014-3289 is a reflected XSS vulnerability in Cisco AsyncOS used by ESA, WSA, and SMA. The issue stems from insufficient input validation of the date_range parameter on the web management interface (notably monitor/reports/overview). A remote attacker can inject arbitrary script by tricking a...

Cisco AsyncOS contains a reflected cross-site scripting (XSS) vulnerability

Overview Cisco AsyncOS contains a reflected cross-site scripting XSS vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2014-3289 Cisco AsyncOS, the underlying OS for the Cisco Email Security Appliance, Web Security Applianc...

CVE-2014-3289: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance ESA 8.0, Web Security Appliance WSA 8.0 .5 Hot Patch 1 and earlier, and Content Security Management Appliance SMA 8.3 and earlier allows remote attackers to inject arbitrary web...

Cisco AsyncOS Cross-Site Scripting Vulnerability

A vulnerability in the web management interface of Cisco AsyncOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation of a parameter. An...

Design/Logic Flaw

Cisco AsyncOS on Email Security Appliance ESA and Content Security Management Appliance SMA devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085...

CVE-2014-2195

Cisco AsyncOS on Email Security Appliance ESA and Content Security Management Appliance SMA devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085...

CVE-2014-2195

CVE-2014-2195 affects Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA). When Active Directory is enabled, the software does not properly handle group names, enabling a remote attacker to gain role privileges by exploiting group-name similarity (Bug I...

CVE-2014-2195: Improper Input Validation

Cisco AsyncOS on Email Security Appliance ESA and Content Security Management Appliance SMA devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085...

Cisco Web Security Appliance HTTP头重定向漏洞

CVE ID:CVE-2014-2137 Cisco Web Security Appliance是安全的Web网关，在一个平台上集成了恶意软件防护、应用可视化控制、策略控制等。Cisco IronPort AsyncOS是电子邮件安全设备。 某些关于HTTP头的输入在用来重定向用户之前没有正确验证。这可以被利用来将用户重定向到任意网站。 0 Cisco Web Security Appliance 7.x Cisco Web Security Appliance 8.x 目前没有详细解决方案：...

Cisco AsyncOS for Email Security Appliances Software Remote Code Execution (CSCug79377)

According to its self-reported version and configuration, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by a remote code execution vulnerability in the Safelist/Blocklist SLBL function due to improper handling of SLBL database files. An authenticated, remo...

Cisco Patches AsyncOS Code Execution Vulnerability

Cisco fixed serious vulnerabilities this week in its email and content security management products that could have let an attacker execute code with the privileges of the root user. The company pushed a fix for its AsyncOS Software in both its Email Security Appliance ESA and the Content Securit...

CVE-2014-2119

The End User Safelist/Blocklist aka SLBL service in Cisco AsyncOS Software for Email Security Appliance ESA before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance SMA before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrar...

Code injection

The End User Safelist/Blocklist aka SLBL service in Cisco AsyncOS Software for Email Security Appliance ESA before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance SMA before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrar...

CVE-2014-2119

The CVE-2014-2119 issue affects Cisco AsyncOS for Email Security Appliance (ESA) and Content Security Management Appliance (SMA). The End User Safelist/Blocklist (SLBL) service permits an authenticated remote user to execute arbitrary code with root privileges by uploading a modified SLBL databas...

Cisco AsyncOS code execution

Code execution on mail check...

CVE-2014-2119: Undefined Security Weakness

The End User Safelist/Blocklist aka SLBL service in Cisco AsyncOS Software for Email Security Appliance ESA before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance SMA before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrar...

Cisco AsyncOS Software Code Execution Vulnerability

Cisco AsyncOS Software for Email Security Appliance ESA and Cisco Content Security Management Appliance SMA contain a vulnerability that could allow an authenticated remote attacker to execute arbitrary code with the privileges of the root user. Cisco has released software updates that address th...

Cisco Ironport Bruteforce Login Utility

This module scans for Cisco Ironport SMA, WSA and ESA web login portals, finds AsyncOS versions, and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Cisco Web Security Appliance Web框架任意命令执行漏洞(CVE-2013-3384)

CVECAN ID: CVE-2013-3384 Cisco Web Security Appliance是安全的Web网关，在一个平台上集成了恶意软件防护、应用可视化控制、策略控制等。Cisco IronPort AsyncOS是电子邮件安全设备。 Cisco Web Security Appliance设备上的IronPort AsyncOS在Web框架的实现上，以及Content Security Management Appliance设备和Email Security...

Cisco June 2013 Security Updates

Cisco’s Product Security Incident Response Team pushed out software updates for four different network security products. The fixes contain workarounds that can help users mitigate multiple denial-of-service and command-injection vulnerabilities recently found in Cisco’s software. The holes exist...