CVE-2016-6360

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

CVE-2016-1480

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all...

CVE-2016-1480

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all...

Authentication flaw

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all...

Design/Logic Flaw

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

CVE-2016-6360

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

CVE-2016-6372

CVE-2016-6372 affects Cisco AsyncOS for Cisco ESA and WSA (MIME header handling). A vulnerability in email message and content filtering due to improper error handling of malformed MIME headers could allow an unauthenticated, remote attacker to bypass the device’s filtering, potentially allowing ...

CVE-2016-6360

Cisco CVE-2016-6360 affects Cisco AsyncOS (ESA) and Web Security Appliance (WSA) via the AMP component. The root cause is improper validation of Java Archive (JAR) content scanned when AMP is enabled, which can cause the AMP process to restart unexpectedly and produce a partial DoS. Affected prod...

CVE-2016-1480

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all...

CVE-2016-6440

CVE-2016-6440 affects Cisco Unified Communications Manager (CUCM). Root cause: lack of input sanitization for iframe data in HTTP requests, enabling an attacker to display data inside an iframe and trigger clickjacking (phishing) without user interaction. Affected releases include CUCM 11.0(1.100...

Denial of Service Vulnerability in Multiple Cisco Products

Cisco Email and Web Security Appliance are both products of Cisco, Inc.Cisco Email Security Appliances are a set of operating systems used in email security appliances ESAs of Cisco, Inc.Cisco Web Cisco Email Security Appliances are a set of Cisco operating systems used in email security applianc...

Cisco AsyncOS for Email and Web Security Appliances Remote Security Bypass Vulnerability

Cisco AsyncOS for Email and Web Security Appliances are both products of Cisco, Inc.Cisco AsyncOS for Email Security Appliances is a set of operating systems used in the Email Security Appliance ESA of Cisco, Inc.Cisco Web Security Appliance WSA is a set of Web security appliances. Cisco AsyncOS...

Cisco Web Security Appliance Malformed MIME Header Vulnerability

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to...

Cisco Email and Web Security Appliance JAR Advanced Malware Protection DoS Vulnerability

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. The vulnerability is due to...

Cisco Email and Web Security Appliance MIME Header Bypass Vulnerability

A vulnerability in the email filtering for malformed Multipurpose Internet Mail Extensions MIME headers of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass the filtering functionality of the...

Threat Outbreak Alert RuleID25887: Email Messages Distributing Malicious Software on October 26, 2016

Medium Alert ID: 49439 First Published: 2016 October 26 15:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25887 may contain the following files: Name |...

Threat Outbreak Alert RuleID25851: Email Messages Distributing Malicious Software on October 26, 2016

Medium Alert ID: 49434 First Published: 2016 October 26 15:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25851 may contain the following files: Name |...

Threat Outbreak Alert RuleID25847: Email Messages Distributing Malicious Software on October 26, 2016

Medium Alert ID: 49433 First Published: 2016 October 26 15:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25847 may contain the following files: Name |...

Threat Outbreak Alert RuleID25845: Email Messages Distributing Malicious Software on October 26, 2016

Medium Alert ID: 49430 First Published: 2016 October 26 15:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25845 may contain the following files: Name |...

Threat Outbreak Alert RuleID25844: Email Messages Distributing Malicious Software on October 26, 2016

Medium Alert ID: 49429 First Published: 2016 October 26 15:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25844 may contain the following files: Name |...