CVE-2015-0732

Cross-site scripting XSS vulnerability in Cisco AsyncOS on the Web Security Appliance WSA 9.0.0-193; Email Security Appliance ESA 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance SMA 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco AsyncOS on the Web Security Appliance WSA 9.0.0-193; Email Security Appliance ESA 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance SMA 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML...

Design/Logic Flaw

The LDAP implementation on the Cisco Web Security Appliance WSA 8.5.0-000, Email Security Appliance ESA 8.5.7-042, and Content Security Management Appliance SMA 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain...

CVE-2015-4288

The LDAP implementation on the Cisco Web Security Appliance WSA 8.5.0-000, Email Security Appliance ESA 8.5.7-042, and Content Security Management Appliance SMA 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain...

CVE-2015-0732

Cross-site scripting XSS vulnerability in Cisco AsyncOS on the Web Security Appliance WSA 9.0.0-193; Email Security Appliance ESA 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance SMA 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML...

Cisco Email Security Appliance AsyncOS Cross-Site Scripting Vulnerability

A vulnerability in the web management interface of multiple Cisco products could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation of a...

Threat Outbreak Alert RuleID16937: Email Messages Distributing Malicious Software on July 24, 2015

Medium Alert ID: 40145 First Published: 2015 July 27 21:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16937 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID16925: Email Messages Distributing Malicious Software on July 24, 2015

Medium Alert ID: 40140 First Published: 2015 July 27 21:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16925 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID16793: Email Messages Distributing Malicious Software on July 20, 2015

Medium Alert ID: 40047 First Published: 2015 July 20 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16793 may contain the following files: Name | Siz...

CVE-2015-4278

Cisco Email Security Appliance ESA devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service per-domain e-mail reception outage by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806...

Design/Logic Flaw

Cisco Email Security Appliance ESA devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service per-domain e-mail reception outage by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806...

CVE-2015-4278

Cisco Email Security Appliance (ESA) vulnerable to CVE-2015-4278: 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a DoS (per-domain email reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain (Bug ID CSCuv14806). The root cause is malformed DMARC policy ...

CVE-2015-4278

Cisco Email Security Appliance ESA devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service per-domain e-mail reception outage by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806...

Cisco Email Security Appliance Malformed DMARC Policy Records File Modification Vulnerability

A vulnerability in the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to generate malformed Domain-Based Message Authentication, Reporting, and Conformance DMARC policy records to the targeted system. The vulnerability occurs because the affected ESA is not abl...

Microsoft VBScript CVE-2015-2372 Remote Code Execution Vulnerability

Description Microsoft VBScript is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies...

Cisco Email Security Appliance AsyncOS Denial of Service Vulnerability

Cisco AsyncOS on Email Security Appliance ESA device is a set of operating systems running in the Email Security Appliance ESA from Cisco USA. A security vulnerability exists in Cisco AsyncOS on the Cisco ESA device. When the clustering component is enabled in the program, a remote attacker could...

Code injection

Cisco AsyncOS on Email Security Appliance ESA devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service clustering and SSH outage via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636...

CVE-2015-4236

Cisco AsyncOS on Email Security Appliance ESA devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service clustering and SSH outage via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636...

CVE-2015-4236

Cisco AsyncOS on Email Security Appliance ESA devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service clustering and SSH outage via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636...

CVE-2015-4236

Cisco AsyncOS for Email Security Appliances (ESA) with clustering enabled is affected on ESA software versions 8.5.6-073, 8.5.6-074, and 9.0.0-461. The issue stems from improper handling of high-rate packet floods, allowing remote attackers to trigger a denial-of-service condition that makes clus...