CVE-2016-6360

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

CVE-2016-1486

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

CVE-2016-6360

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

CVE-2016-1486

CVE-2016-1486 affects Cisco AsyncOS for Cisco Email Security Appliances, specifically the AMP email-attachment scanning feature. The root cause is improper handling in the attachment-scanning process, enabling an unauthenticated, remote attacker to trigger a DoS that stops scanning and forwarding...

CVE-2016-1486

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

CVE-2016-6360

Cisco CVE-2016-6360 affects Cisco AsyncOS (ESA) and Web Security Appliance (WSA) via the AMP component. The root cause is improper validation of Java Archive (JAR) content scanned when AMP is enabled, which can cause the AMP process to restart unexpectedly and produce a partial DoS. Affected prod...

CVE-2016-1486: Undefined Security Weakness

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

CVE-2016-6360: Improper Input Validation

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

Cisco Web Security Appliance JAR Advanced Malware Protection DoS Vulnerability (cisco-sa-20161026-esawsa3)

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. The vulnerability is due to...

Cisco Email Security Appliance Advanced Malware Protection Attachment Scanning Denial of Service Vulnerability

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

Adobe Releases Security Updates for ColdFusion

Adobe has released security updates to address a vulnerability in ColdFusion. Exploitation of this vulnerability may allow a remote attacker to obtain sensitive information from an affected system. Users and administrators are encouraged to review Adobe Security Bulletin APSB16-30 and apply the...

Unsealing the Deal: Cyber Threats to Mergers and Acquisitions Persist in a Hot Market

Risks Posed by Sensitive Corporate Communications, Broadened Attack Surface In 2015, a record $5 trillion dollars was tied up in mergers and acquisitions M&A deals, according to JP Morgan. So far, mega deals in 2016 include Microsoft’s purchase of LinkedIn, Shire’s acquisition of Baxalta, and...

CVE-2016-1443

The virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote attackers to bypass a sandbox protection mechanism, and consequently obtain sensitive interprocess information or modify interprocess data, via a crafted malware sample...

Design/Logic Flaw

The virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote attackers to bypass a sandbox protection mechanism, and consequently obtain sensitive interprocess information or modify interprocess data, via a crafted malware sample...

CVE-2016-1443

CVE-2016-1443 affects Cisco AMP Threat Grid Appliance before 2.1.1. The vulnerability lies in the virtual network stack, allowing an unauthenticated remote attacker to bypass sandboxing via a crafted malware sample and to obtain or modify interprocess data. Cisco’s advisory confirms exploitation ...

CVE-2016-1443

The virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote attackers to bypass a sandbox protection mechanism, and consequently obtain sensitive interprocess information or modify interprocess data, via a crafted malware sample...

CVE-2016-1443: Undefined Security Weakness

The virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote attackers to bypass a sandbox protection mechanism, and consequently obtain sensitive interprocess information or modify interprocess data, via a crafted malware sample...

Cisco AMP Threat Grid Unauthorized Clean IP Access Vulnerability

A vulnerability in the virtual network stack of the Cisco AMP Threat Grid Appliance could allow an unauthenticated, remote attacker to access internal interfaces within the appliance. The vulnerability is due to insufficient isolation between the sandbox and other internal components. An attacker...

CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

CVE-2016-1405: Improper Restriction of Operations within the Bounds of a Memory Buffer

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...