CVE-2019-1955

Cisco AsyncOS (ESA) SPF handling vulnerability (CVE-2019-1955) allows an unauthenticated, remote attacker to bypass header filters by sending specially crafted SPF packets. Root cause is incomplete input/validation for SPF messages. Affected product: Cisco Email Security Appliance with AsyncOS; c...

CVE-2019-15971

CVE-2019-15971 affects Cisco AsyncOS on Cisco Email Security Appliance (ESA): the MP3 detection engine fails to validate certain MP3 file types, enabling an unauthenticated, remote attacker to bypass configured content filters by sending a crafted MP3 through the device. The reported impact is by...

CVE-2019-12706

Cisco AsyncOS on Cisco Email Security Appliance (ESA) contains a SPF handling vulnerability that allows an unauthenticated, remote attacker to bypass configured header filters by sending crafted SPF packets. Affected component is the SPF validation in ESA’s Sender Policy Framework feature; impact...