The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Cisco Content Security Management Appliance

Cisco Content Security Management Appliance: open redirect
An attacker can deceive the user of Cisco Content Security Management Appliance, in order to redirect him to a malicious site...
CERTFR-2020-AVI-274, cisco-sa-sma-opn-rdrct-yPPMdsMQ, CVE-2020-3178, VIGILANCE-VUL-32203
Cisco AsyncOS: overload via HTTP Request Headers
An attacker can trigger an overload via HTTP Request Headers of Cisco AsyncOS, in order to trigger a denial of service...
CERTFR-2020-AVI-128, cisco-sa-cont-sec-gui-dos-nJ625dXb, CSCvq96943, CSCvs33296, CSCvs33306, CVE-2020-3164, VIGILANCE-VUL-31727
Cisco WSA, SMA: read-write access via HTTP Header Injection
An attacker can bypass access restrictions via HTTP Header Injection of Cisco WSA or SMA, in order to read or alter data...
CERTFR-2020-AVI-055, cisco-sa-20200122-wsa-sma-header-inject, CSCvp16724, CSCvq04931, CVE-2020-3117, VIGILANCE-VUL-31408
Cisco Content Security Management Appliance: information disclosure via Spam Quarantine
An attacker can bypass access restrictions to data via Spam Quarantine of Cisco Content Security Management Appliance, in order to obtain sensitive information...
cisco-sa-20190904-sma-info-dis, CSCvp62827, CVE-2019-12635, VIGILANCE-VUL-30247
Cisco Content Security Management Appliance: Cross Site Scripting
An attacker can trigger a Cross Site Scripting of Cisco Content Security Management Appliance, in order to run JavaScript code in the context of the web site...
CERTFR-2018-AVI-536, cisco-sa-20181107-sma-xss, CSCvk59387, CSCvn85626, CVE-2018-15393, VIGILANCE-VUL-27721
FreeBSD: denial of service via SegmentSmack
An attacker can generate a fatal error via TCP Reassembly of FreeBSD, in order to trigger a denial of service...
6387, cisco-sa-20180824-linux-tcp, cpujan2019, CVE-2018-6922, FreeBSD-SA-18:08.tcp, ibm10737709, JSA10876, SegmentSmack, sk134253, VIGILANCE-VUL-26922
Linux kernel: denial of service via SegmentSmack
An attacker can generate a fatal error via tcp_prune_ofo_queue() of the Linux kernel, in order to trigger a denial of service...
CERTFR-2018-AVI-374, CERTFR-2018-AVI-375, CERTFR-2018-AVI-386, CERTFR-2018-AVI-390, CERTFR-2018-AVI-392, CERTFR-2018-AVI-419, CERTFR-2018-AVI-420, CERTFR-2018-AVI-428, CERTFR-2018-AVI-457, CERTFR-2018-AVI-584, CERTFR-2019-AVI-346, CERTFR-2019-AVI-354, CERTFR-2020-AVI-207, cisco-sa-20180824-linux-tcp, cpujan2019, cpujul2020, CVE-2018-5390, DLA-1466-1, DSA-4266-1, ibm10742755, JSA10876, JSA10917, K95343321, openSUSE-SU-2018:2242-1, openSUSE-SU-2018:2404-1, RHSA-2018:2384-01, RHSA-2018:2395-01, RHSA-2018:2645-01, RHSA-2018:2776-01, RHSA-2018:2785-01, RHSA-2018:2789-01, RHSA-2018:2790-01, RHSA-2018:2791-01, RHSA-2018:2924-01, RHSA-2018:2933-01, RHSA-2018:2948-01, SB10249, SegmentSmack, sk134253, SSA-377115, SSB-439005, SUSE-SU-2018:2223-1, SUSE-SU-2018:2328-1, SUSE-SU-2018:2344-1, SUSE-SU-2018:2374-1, SUSE-SU-2018:2596-1, SUSE-SU-2019:14127-1, SUSE-SU-2019:1870-1, SYMSA1467, USN-3732-1, USN-3732-2, USN-3741-1, USN-3741-2, USN-3741-3, USN-3742-1, USN-3742-2, USN-3742-3, USN-3763-1, VIGILANCE-VUL-26913, VU#962459
Cisco Email Security Appliance, Content Security Management Appliance: mail disclosure
An attacker can tamper with the spam manager of Cisco Email Security Appliance and Content Security Management Appliance, in order to get any any mail...
cisco-sa-20180207-esacsm, CVE-2018-0140, VIGILANCE-VUL-25252
Cisco ESA/SMA: privilege escalation via CLI
An attacker can bypass restrictions via CLI of Cisco ESA/SMA, in order to escalate his privileges...
CERTFR-2018-AVI-042, cisco-sa-20180117-esasma, CSCvb34303, CSCvb35726, CVE-2018-0095, VIGILANCE-VUL-25102
Cisco ESA/SMA: read-write access via HTTP Response Splitting
An attacker can bypass access restrictions via HTTP Response Splitting of Cisco ESA/SMA, in order to read or alter data...
cisco-sa-20171115-esa, CSCvf16705, CSCvj76180, CVE-2017-12309, VIGILANCE-VUL-24477
Our database contains other pages. You can request a free trial to read them.

Display information about Cisco Content Security Management Appliance: