CISCO-SA-20190703-ESA

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:52+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794652216265...

CISCO-SA-20190417-ESA

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:42+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793539871871...

CVE-2024-10659

CVE-2024-10659 affects ESAFENET CDG 5. The vulnerability lies in the delSystemEncryptPolicy function of /com/esafenet/servlet/document/CDGAuthoriseTempletService.java, where manipulation of the id argument enables SQL injection. The issue can be exploited remotely and, per the initial records, th...

CVE-2024-10069 ESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication sql injection

A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function actionPassMainApplication of the file /com/esafenet/servlet/client/MailDecryptApplicationService.java. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2024-42885

SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page...

Cisco Ironport Bruteforce Login Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Ironport Bruteforce Login Utility', 'Description' = % This module scans for Cisco Ironport SMA, WSA and ESA web login portals, finds AsyncO...

Kibana 7.7.x < 7.17.23 / 8.0.x < 8.14.2 (ESA-2024-22)

The version of Kibana installed on the remote host is prior to 7.17.23 or 8.14.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2024-22 advisory. - A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector...

Kibana 8.6.3 < 8.14 (ESA-2024-15)

The version of Kibana installed on the remote host is between 8.6.3 and 8.13.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2024-15 advisory. - A flaw was discovered in Kibana, allowing view-only users of alerting to use the runsoon API making the alerting rule run...

Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Secure Email Gateway, formerly Email Security Appliance ESA; and Secure Web Appliance could allow a remote attacker to conduct a cross-site scripting XSS attack against...

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

CVE-2023-49488

CVE-2023-49488 describes a cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1. The issue permits injection of crafted payloads into the nic parameter to execute arbitrary web scripts or HTML. Documented impacts are user interaction is required and affected confidentiality/ integrit...

OpenSearch StackOverflow vulnerability

Impact A flaw was discovered in OpenSearch, affecting the search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service. The issue was identified by Elastic Engineering and corresponds to security advisory ESA-2023-14 CVE-2023-31419...

Elastic Logstash 8.10.x < 8.11.1 Information Disclosure Vulnerability (ESA-2023-26)

Elastic Logstash is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-20009

CVE-2023-20009 affects Cisco’s Web UI and administrative CLI on the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA). The issue stems from processing of a specially crafted SNMP configuration file, which, if uploaded by an authenticated user with at least operator pri...

Elastic Kibana Reporting Vulnerability (ESA-2021-13)

Elastic Kibana is prone to a reporting vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...

CVE-2022-20772

CVE-2022-20772 affects Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager. The issue is an HTTP Response Header Injection/HTTP response splitting caused by insufficient input sanitization, allowing an unauthenticated, remote attacker to inject headers and influence the re...

CVE-2022-20772

A vulnerability in Cisco Email Security Appliance ESA and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vulnerability is due to the failure of the application or its environment to properly sanitize input...