CVE-2020-3133 Cisco Email Security Appliance Content Filter Bypass Vulnerability

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper validation of incoming emails. An attacker could exploit...

CVE-2020-3137 Cisco Email Security Appliance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability exists because the...

CVE-2020-3137

CVE-2020-3137 affects Cisco Email Security Appliance (ESA) web-based management interface. The issue is a Cross-Site Scripting (XSS) vulnerability caused by insufficient validation of user-supplied input in the web UI. An unauthenticated, remote attacker could lure a user to click a malicious lin...

The vulnerability of the URL filtering mechanism of Cisco Email Security Appliance allows a hacker to redirect users to a malicious website.

The vulnerability of the URL filtering mechanism of Cisco Email Security Appliance is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to redirect users to a malicious website by sending a specially crafted HTTP request...

McAfee Email Gateway Path Traversal Vulnerability

McAfee Email Gateway MEG is a suite of email security solutions from McAfee USA. A path traversal vulnerability in McAfee Email Gateway version 7.6.406, which originates in the email gateway, can be exploited by an attacker to gain access to locations outside of a restricted directory...

CVE-2020-10227

A cross-site scripting XSS vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email...

The vulnerability in the implementation of the TLS protocol in Cisco AsyncOS software for Cisco Email Security Appliances allows a attacker to induce a service failure.

The vulnerability of the TLS Transport Layer Security implementation in Cisco AsyncOS software for Cisco Email Security Appliances is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CISA Insights: Email-Based Attacks on Elections-Related Entities

The Cybersecurity and Infrastructure Security Agency CISA has released CISA Insights: Actions to Counter Email-Based Attacks on Elections-Related Entities in light of increased sophisticated phishing operations targeting individuals and groups involved in the upcoming U.S. elections. CISA strongl...

Cisco Email Security Appliance (ESA) Information Disclosure (cisco-sa-sma-wsa-esa-info-dis-vsvPzOHP)

According to its self-reported version, the Cisco Email Security Appliance ESA is affected by an information disclosure vulnerability in the web-based management interface of Cisco AsyncOS software due to the use of an insecure method to mask certain passwords on the web-based management interfac...

CVE-2020-3547

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA, and Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to access sensitive information on an affecte...

CVE-2020-3546

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are se...

CVE-2020-3547

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA, and Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to access sensitive information on an affecte...

CVE-2020-3547 Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA, and Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to access sensitive information on an affecte...

CVE-2020-3547 Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA, and Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to access sensitive information on an affecte...

CVE-2020-3547

Cisco AsyncOS software on ESA, SMA, and WSA exposes an information-disclosure vulnerability in the web-based management interface due to an insecure method for masking passwords in HTML. An authenticated, remote attacker connected to the management interface could view the raw HTML and potentiall...

CVE-2020-3546 Cisco Email Security Appliance Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are se...

CVE-2020-3546

CVE-2020-3546 affects Cisco Email Security Appliance (ESA) running Cisco AsyncOS. The issue stems from insufficient validation of requests to the web-based management interface, allowing an unauthenticated, remote attacker to access sensitive information. Exploitation could disclose IP addresses ...

CVE-2020-3546 Cisco Email Security Appliance Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are se...

Cisco Email Security Appliance DoS (cisco-sa-esa-tls-dos-xW53TBhb)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by a denial of service DoS vulnerability in its transport layer security TLS implementation due to inefficient processing of incoming traffic. An unauthenticated, remote attacker can exploit this issue, by...

Cisco Email Security Appliance Information Disclosure (cisco-sa-esa-info-disclosure-vMJMMgJ)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by an information disclosure vulnerability in the web-based management interface, due to insufficient validation of requests sent to it. An unauthenticated, remote attacker can exploit this, by sending speciall...