Multiple Vulnerabilities in Cisco Content Security Management Appliance (cisco-sa-20130626-sma)

According to its self-reported version, the version of Cisco Content Security Management Appliance running on the remote host has the following vulnerabilities : - An unspecified vulnerability exists in the web framework that could allow a remote, authenticated attacker to execute arbitrary...

Cisco Email Security / Web Security / Content Security multiple security vulnerabilities

Code execution, DoS...

CVE-2013-3395

Cross-site request forgery CSRF vulnerability in the web framework on Cisco IronPort Web Security Appliance WSA devices, Email Security Appliance ESA devices, and Content Security Management Appliance SMA devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs...

CVE-2013-3395

CVE-2013-3395 describes a CSRF flaw in the web framework of Cisco IronPort products (Web Security Appliance, Email Security Appliance, Content Security Management Appliance). The vulnerability allows remote attackers to hijack the authentication of arbitrary users by inducing them to perform unwa...

Cisco Web Security Appliance Web框架任意命令执行漏洞(CVE-2013-3384)

CVECAN ID: CVE-2013-3384 Cisco Web Security Appliance是安全的Web网关，在一个平台上集成了恶意软件防护、应用可视化控制、策略控制等。Cisco IronPort AsyncOS是电子邮件安全设备。 Cisco Web Security Appliance设备上的IronPort AsyncOS在Web框架的实现上，以及Content Security Management Appliance设备和Email Security...

PT-2013-4352

Name of the Vulnerable Software and Affected Versions Cisco IronPort Web Security Appliance WSA devices affected versions not specified Cisco Email Security Appliance ESA devices affected versions not specified Cisco Content Security Management Appliance SMA devices affected versions not specifie...

Cisco June 2013 Security Updates

Cisco’s Product Security Incident Response Team pushed out software updates for four different network security products. The fixes contain workarounds that can help users mitigate multiple denial-of-service and command-injection vulnerabilities recently found in Cisco’s software. The holes exist...

Cisco Releases Security Advisories

Cisco has released four security advisories to address multiple vulnerabilities. These vulnerabilities may allow a remote attacker to execute arbitrary code on a vulnerable system or cause a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco...

CVE-2013-3384

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...

Code injection

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3386

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3384

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...

CVE-2013-3385

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance...

CVE-2013-3385

CVE-2013-3385 affects Cisco IronPort AsyncOS management GUI across multiple Cisco devices (WSA, ESA, CMA). The vulnerability allows remote attackers to cause a denial of service (system hang) by sending a series of HTTP or HTTPS requests to the management interface. Affected versions include WSA ...

PT-2013-4342

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance versions prior to 7.1.3-013 Cisco Web Security Appliance versions prior to 7.5.0-838 Cisco Web Security Appliance versions prior to 7.7.0-550 Cisco Email Security Appliance versions prior to 7.1.5-104 Cisco Email...

PT-2013-4344

Name of the Vulnerable Software and Affected Versions IronPort AsyncOS versions prior to 7.1.5-106 IronPort AsyncOS versions 7.3, 7.5, and 7.6 prior to 7.6.3-019 Content Security Management Appliance versions prior to 7.9.1-102 Content Security Management Appliance version 8.0 prior to 8.0.0-404...

CVE-2013-3386: Undefined Security Weakness

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3384: Improper Control of Generation of Code

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...

CVE-2013-3385: Undefined Security Weakness

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance...

PT-2013-4343

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance versions prior to 7.1.3-013 Cisco Web Security Appliance versions prior to 7.5.0-838 Cisco Web Security Appliance versions prior to 7.7.0-602 Cisco Email Security Appliance versions prior to 7.1.5-106 Cisco Email...