CVE-2022-20664

CVE-2022-20664 affects Cisco Secure Email and Web Manager (SMA) and Cisco Email Security Appliance (ESA). The issue is an information-disclosure vulnerability in the web management interface caused by insufficient input sanitization when querying an external LDAP authentication server. An authent...

CVE-2020-3134

Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) is affected by CVE-2020-3134 due to an improper validation of zip files in the zip decompression engine. The issue can be exploited by sending an email with a crafted zip- compressed attachment, potentially triggering a restart of th...

CVE-2023-20009

CVE-2023-20009 affects Cisco’s Web UI and administrative CLI on the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA). The issue stems from processing of a specially crafted SNMP configuration file, which, if uploaded by an authenticated user with at least operator pri...

CVE-2022-20960

Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) is affected by CVE-2022-20960. The issue arises from improper handling of TLS connections, enabling an unauthenticated remote attacker to trigger a DoS by opening a large number of concurrent TLS connections. This can cause the ESA t...

CVE-2020-3181

CVE-2020-3181 : Cisco AsyncOS for Cisco Email Security Appliances (ESA) contains an uncontrolled resource-exhaustion vulnerability in the malware detection/AMP path due to insufficient control over memory allocation. An unauthenticated remote attacker can send a crafted email to exhaust device re...

CVE-2020-3132

Cisco AsyncOS for Cisco Email Security Appliance (ESA) is affected by CVE-2020-3132, a Denial of Service vulnerability in the email message scanning component caused by inadequate parsing of specific email body components. An unauthenticated, remote attacker can trigger a temporary DoS by sending...

CVE-2020-3133

Cisco AsyncOS for Cisco Email Security Appliance (ESA) contains an input-validation flaw in the email-message scanning path that allows an unauthenticated, remote attacker to bypass content filters by sending a crafted email to a protected recipient. Root cause: improper validation of incoming em...

CVE-2020-3447

The CVE-2020-3447 issue affects Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA). Affected component: CLI log subscriptions that are overly verbose, enabling an authenticated attacker with operator-level credentials (or higher) to access...

CVE-2020-3370

CVE-2020-3370 affects Cisco Content Security Management Appliance (SMA). The vulnerability arises from insufficient input validation in the URL filtering feature, enabling an unauthenticated, remote attacker to bypass URL filtering by sending a crafted HTTP request and potentially redirecting use...