Known vulnerabilities in Cisco Email Security Appliance

Vendor: Cisco Systems, Inc
Software: Cisco Email Security Appliance
Software CPE: cpe:2.3:a:cisco_systems:cisco_email_security_appliance:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Email Security Appliance Cisco Email Security Appliance is affected by 32 known vulnerabilities: 1 critical, 6 medium, 25 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72310 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20075		 CWE-78 Low
No
No
 12.5.4-041, 13.0.5-007, 13.5.4-038, 14.2.1-020, 14.3.0-032 15.02.2023 SB2023021588
#VU72309 - Improper input validation
CVE-2023-20009		 CWE-20 Low
No
No
 12.5.4-041, 13.0.5-007, 13.5.4-038, 14.2.1-020, 14.3.0-032 15.02.2023 SB2023021588
#VU71330 - Security Features
CVE-2023-20057		 CWE-254 Medium
No
No
 - 18.01.2023 SB2023011898
#VU64449 - Exposure of sensitive information to an unauthorized actor
CVE-2022-20664		 CWE-200 Medium
No
No
 14.0.1-020 16.06.2022 SB2022061617
#VU64421 - Improper Authentication
CVE-2022-20798		 CWE-287 Critical
No
No
 14.0.1-033 15.06.2022 SB2022061590
#VU61942 - Uncaught Exception
CVE-2022-20675		 CWE-248 Medium
No
No
 14.02.0-020 06.04.2022 SB2022040627
#VU52965 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1516		 CWE-200 Low
No
No
 14.0 07.05.2021 SB2021050710
#VU49908 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1129		 CWE-200 Medium
No
No
 13.5.2 20.01.2021 SB2021012116
#VU30333 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-3370		 CWE-601 Low
No
No
 13.0.1, 13.5.1 17.07.2020 SB2020071707
#VU16923 - Improper input validation
CVE-2018-15460		 CWE-20 Medium
No
No
 11.0.2 044, 11.1.2 023, 12.0.0 281 10.01.2019 SB2019011008
#VU16922 - Memory corruption
CVE-2018-15453		 CWE-119 Medium
No
No
 11.0.2 044, 11.1.1 037, 11.1.1 042, 12.0.0 281 09.01.2019 SB2019011008
#VU14696 - Improper input validation
CVE-2018-0447		 CWE-20 Low
No
No
 - 05.09.2018 SB2018090716
#VU14432 - Permissions, Privileges, and Access Controls
CVE-2018-0419		 CWE-264 Low
No
No
 - 15.08.2018 SB2018081613
#VU10421 - Permissions, Privileges, and Access Controls
CVE-2018-0140		 CWE-264 Low
No
No
 - 08.02.2018 SB2018020813
SB2018020814
#VU10121 - Permissions, Privileges, and Access Controls
CVE-2018-0095		 CWE-264 Low
No
No
 - 22.01.2018 SB2018011912
#VU9514 - Error Handling
CVE-2017-12353		 CWE-388 Low
No
No
 - 01.12.2017 SB2017120115
#VU9385 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2017-12309		 CWE-113 Low
No
No
 - 16.11.2017 SB2017112113
#VU8545 - Resource exhaustion
CVE-2017-12215		 CWE-400 Low
No
No
 - 21.09.2017 SB2017092103
#VU8143 - Improper input validation
CVE-2017-12218		 CWE-20 Low
No
No
 - 07.09.2017 SB2017090704
#VU7983 - Exposure of sensitive information to an unauthorized actor
CVE-2017-6783		 CWE-200 Low
No
No
 - 16.08.2017 SB2017081712


Showing elements 1 - 20 out of 32