ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability EMC Identifier: ESA-2015-130 CVE Identifier: CVE-2015-4530 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected products: • EMC...

CVE-2015-4288

The LDAP implementation on the Cisco Web Security Appliance WSA 8.5.0-000, Email Security Appliance ESA 8.5.7-042, and Content Security Management Appliance SMA 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain...

CVE-2015-4288

CVE-2015-4288 affects Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048. The LDAP server in these devices does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to s...

CVE-2015-0732

Summary: CVE-2015-0732 is a cross-site scripting (XSS) vulnerability affecting Cisco AsyncOS on Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033. The issue arises from insuf...

PT-2015-4847

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS on the Web Security Appliance WSA version 9.0.0-193 Cisco Email Security Appliance ESA versions 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000 Cisco Content Security Management Appliance SMA version 9.1.0-033 Description A...

ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability EMC Identifier: ESA-2015-122 CVE Identifier: CVE-2015-4528 Severity Rating: CVSS v2 Base Score: 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P Affected products: • EMC Documentum CenterStage...

CVE-2015-4278

Cisco Email Security Appliance (ESA) vulnerable to CVE-2015-4278: 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a DoS (per-domain email reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain (Bug ID CSCuv14806). The root cause is malformed DMARC policy ...

PT-2015-6496

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA devices version 8.5.6-106 Cisco Email Security Appliance ESA devices version 9.5.0-201 Description The issue allows remote attackers to cause a denial of service, resulting in a per-domain email reception...

CVE-2015-4278: Improper Input Validation

Cisco Email Security Appliance ESA devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service per-domain e-mail reception outage by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806...

Extra information for CVE-2014-2513 - EMC Documentum Content Server: arbitrary code execution

Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed On November 2013 I discovered vulnerability in EMC Documentum Content Server which allow authenticated user to execute arbitrary commands using dmbptransition docbase method for detailed...

CVE-2015-4236

Cisco AsyncOS for Email Security Appliances (ESA) with clustering enabled is affected on ESA software versions 8.5.6-073, 8.5.6-074, and 9.0.0-461. The issue stems from improper handling of high-rate packet floods, allowing remote attackers to trigger a denial-of-service condition that makes clus...

PT-2015-6476

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS on Email Security Appliance ESA devices versions 8.5.6-073 through 8.5.6-074 Cisco AsyncOS on Email Security Appliance ESA devices version 9.0.0-461 Description The issue allows remote attackers to cause a denial of service,...

Extra information for CVE-2014-4626 - EMC Documentum Content Server: authenticated user is able to elevate privileges, hijack Content Server filesystem, execute arbitrary commands by creating malicious dm_job objects

Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed On April 2014 I discovered vulnerability in EMC Documentum Content Server which allow authenticated user to elevate privileges, hijack Content Server filesystem or execute arbitrary comman...

Cisco Virtual WSA / ESA / SMA default keys

Default ssh keys are installed...

Cisco Virtual WSA, ESA, and SMA Default SSH Host Keys Vulnerability

A vulnerability in the remote support functionality of Cisco WSAv, Cisco ESAv, and Cisco SMAv Software could allow an unauthenticated, remote attacker to decrypt and impersonate secure communication between any virtual content security appliances. The vulnerability is due to the presence of...

CVE-2015-4184

Cisco Email Security Appliance (ESA) AsyncOS contains an anti-spam scanner vulnerability caused by improper handling of a crafted DNS SPF TXT record, allowing unauthenticated remote bypass of anti-spam restrictions. Affected ESA versions include 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074. Exploitatio...

CVE-2015-4184: Improper Input Validation

The anti-spam scanner on Cisco Email Security Appliance ESA devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733...

CVE-2015-0734

CVE-2015-0734 affects Cisco Email Security Appliance (ESA) 8.5.6-106. Multiple XSS vulnerabilities allow remote attackers to inject arbitrary script/HTML via unspecified GET/POST parameters (Bug CSCut87743). Root cause: insufficient input validation of HTTP parameters. Impact is remote XSS; no pu...

PT-2015-4849

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA version 8.5.6-106 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a GET or POST request. Recommendations For Cisco Email Security Appliance E...

CVE-2015-0734: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities on the Cisco Email Security Appliance ESA 8.5.6-106 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCut87743...