Vulnerabilities > Cisco > Email Security Appliance > 10.0.0.203

DATE CVE VULNERABILITY TITLE RISK
2020-01-26 CVE-2020-3134 Improper Input Validation vulnerability in Cisco Email Security Appliance
A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-20
6.5
6.5
2017-06-13 CVE-2017-6661 Cross-site Scripting vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka Message Tracking XSS.
network
low complexity
cisco CWE-79
6.1
6.1