Design/Logic Flaw

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions MIME headers of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass the filtering...

CVE-2016-1486

CVE-2016-1486 affects Cisco AsyncOS for Cisco Email Security Appliances, specifically the AMP email-attachment scanning feature. The root cause is improper handling in the attachment-scanning process, enabling an unauthenticated, remote attacker to trigger a DoS that stops scanning and forwarding...

CVE-2016-1486: Undefined Security Weakness

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

CVE-2016-6356: Improper Input Validation

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service DoS condition. Affected...

CVE-2016-6360: Improper Input Validation

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

PT-2016-6844

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Email Security Appliances ESA versions 9.5 through the first fixed release Cisco AsyncOS Software for Web Security Appliances WSA versions prior to the first fixed release Description A vulnerability in Advanced...

CVE-2016-1480: Undefined Security Weakness

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all...

PT-2016-4827

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA versions prior to 9.1.1-038 Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA versions prior to 9.7.1-0...

PT-2016-4828

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances versions prior to 9.1.1-038 Cisco AsyncOS Software for Cisco Email Security Appliances versions prior to 9.7.1-066 Description A denial of service DoS condition can be caused by an...

CVE-2016-1481: Improper Input Validation

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device.Affected Products: This vulnerability affects all releases prior to...

CVE-2016-6372: Improper Input Validation

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions MIME headers of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass the filtering...

Cisco Email Security Appliance Advanced Malware Protection Attachment Scanning Denial of Service Vulnerability

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

Cisco AsyncOS Software Remote Security Bypass Vulnerability (CNVD-2015-00993)

Cisco AsyncOS is Cisco's customized operating system for the performance and security of all mail applications. A remote security bypass vulnerability exists in Cisco AsyncOS Software that could allow an attacker to bypass certain security restrictions and perform unauthorized operations...

CVE-2014-2119: Undefined Security Weakness

The End User Safelist/Blocklist aka SLBL service in Cisco AsyncOS Software for Email Security Appliance ESA before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance SMA before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrar...