Product by Cisco

Cisco Email Security Appliance

27 known vulnerabilities in Cisco Email Security Appliance (Cisco), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Cisco Email Security Appliance (Cisco)

Critical	CVE-2016-6406	Cisco Email Security Appliance (ESA) Firmware: security vulnerability	9.8	22.09.2016
High	CVE-2019-15961	Clam AntiVirus (ClamAV) Software Email Parsing Vulnerability also in 3 other products	7.5	15.01.2020
High	CVE-2018-15453	Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability	8.6	10.01.2019
High	CVE-2016-6458	Cisco AsyncOS 10.0.0-125 and 9.7.1-066: security vulnerability	7.5	19.11.2016
High	CVE-2017-6671	Cisco Email Security Appliance: security vulnerability	7.5	13.06.2017
Medium	CVE-2017-3818	Cisco AsyncOS 9.7.1-066: security vulnerability	5.8	03.02.2017
Medium	CVE-2017-3827	Cisco AsyncOS Software for Cisco ESA and Cisco WSA: security vulnerability also in 1 other product	5.8	22.02.2017
Medium	CVE-2016-6462	Cisco Email Security Appliance (ESA) Firmware: security vulnerability	5.3	19.11.2016
Medium	CVE-2018-0140	Cisco Content Security Management Appliance: Exposure of Sensitive Information to an Unauthorized Actor also in 1 other product	6.5	08.02.2018
Medium	CVE-2017-12309	Cisco Email Security Appliance: HTTP Request/Response Splitting	5.3	16.11.2017
High	CVE-2019-12706	Cisco Email Security Appliance Filter Bypass Vulnerability	6.5	02.10.2019
High	CVE-2019-1955	Cisco Email Security Appliance Header Injection Vulnerability	5.3	08.08.2019
Medium	CVE-2016-6463	Cisco Email Security Appliance (ESA) Firmware: security vulnerability	5.3	19.11.2016
Medium	CVE-2019-15988	Cisco Email Security Appliance URL Filtering Bypass Vulnerability	5.8	26.11.2019
Not rated	CVE-2014-2119	Cisco Content Security Management Appliance: Code Execution also in 2 other products	—	20.03.2014
Not rated	CVE-2014-3289	Cisco Content Security Management Appliance: Cross-Site Scripting (XSS) also in 3 other products	—	10.06.2014
Not rated	CVE-2015-4236	Cisco Email Security Appliance (ESA): Denial of Service also in 1 other product	—	10.07.2015
Not rated	CVE-2015-0624	Cisco Content Security Management Appliance: security vulnerability also in 2 other products	—	21.02.2015
Not rated	CVE-2015-0732	Cisco Web Security Appliance (WSA): Cross-Site Scripting (XSS) also in 2 other products	—	29.07.2015
Not rated	CVE-2015-6309	Cisco Email Security Appliance (ESA): Denial of Service also in 1 other product	—	02.10.2015
Not rated	CVE-2015-0734	Cisco Email Security Appliance (ESA) Firmware: Cross-Site Scripting (XSS)	—	15.05.2015
Not rated	CVE-2015-4278	Cisco Email Security Appliance (ESA) Firmware: Denial of Service	—	16.07.2015
Medium	CVE-2022-20772	Cisco Secure Email: HTTP Request/Response Splitting also in 2 other products	4.7	03.11.2022
Medium	CVE-2019-15971	Cisco Email Security Appliance MP3 Content Filter Bypass Vulnerability	5.8	26.11.2019
Not rated	CVE-2013-5537	Cisco Content Security Management Appliance: Denial of Service also in 2 other products	—	24.10.2013

All vulnerabilities in search

All products by Cisco

Key figures

Vulnerabilities