Vulnerabilities > Cisco > Email Security Appliance Firmware > 11.0.0.274

DATE CVE VULNERABILITY TITLE RISK
2018-02-08 CVE-2018-0140 Forced Browsing vulnerability in Cisco products
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information.
network
low complexity
cisco CWE-425
6.5
6.5