[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqL4SYABaT_IHcAHQs8PVUhoWlswt2SQXIaXkK7jU2vg":3,"g5a-ex:cisco\u002Fcontent_security_management_appliance@*":255,"g5a-family:cisco\u002Fcontent_security_management_appliance":257},{"success":4,"data":5},true,{"product":6,"versions":117,"topVulnerabilitiesByEpss":167,"kevVulnerabilities":232,"seoMetadata":233,"meta":252},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":116},"cisco","content_security_management_appliance",49,28,0,"2021-05-06",[14,18,20,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,100,102,104,106,108,110,112,114],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.0.0-096",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"10.0.0-203",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"10.1.0-037",2,{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},"10.1.0-049",{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},"10.1.0-052",{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},"11.0.0-115",{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},"11.4.0-812",{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},"12.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"12.0.1",{"version":36,"cve_count":16,"kev_count":11,"has_kev":17},"12.5.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"12.5.0-436",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"12.8.1-002",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"13.0.0-249",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"13.5.0-114",{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},"13.5.0-117",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"13.6.0",{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},"13.6.0-157",{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},"13.6.1-193",{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},"13.6.1-201",{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},"13.6.2-023",{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},"13.8.1-068",{"version":60,"cve_count":16,"kev_count":11,"has_kev":17},"7.8.0-328",{"version":62,"cve_count":16,"kev_count":11,"has_kev":17},"7.8.1-001",{"version":64,"cve_count":16,"kev_count":11,"has_kev":17},"7.8_base",{"version":66,"cve_count":16,"kev_count":11,"has_kev":17},"7.9.0-201",{"version":68,"cve_count":16,"kev_count":11,"has_kev":17},"7.9.2-116",{"version":70,"cve_count":16,"kev_count":11,"has_kev":17},"8.0.1-031",{"version":72,"cve_count":16,"kev_count":11,"has_kev":17},"8.1.0-001",{"version":74,"cve_count":16,"kev_count":11,"has_kev":17},"8.1.1-033",{"version":76,"cve_count":16,"kev_count":11,"has_kev":17},"8.1.2-000",{"version":78,"cve_count":16,"kev_count":11,"has_kev":17},"8.2.0-238",{"version":80,"cve_count":16,"kev_count":11,"has_kev":17},"8.3.0-350",{"version":82,"cve_count":16,"kev_count":11,"has_kev":17},"8.3.5-061",{"version":84,"cve_count":16,"kev_count":11,"has_kev":17},"8.3.6-014",{"version":86,"cve_count":16,"kev_count":11,"has_kev":17},"8.3.6-039",{"version":88,"cve_count":16,"kev_count":11,"has_kev":17},"8.3.6-048",{"version":90,"cve_count":16,"kev_count":11,"has_kev":17},"8.3.7-010",{"version":92,"cve_count":16,"kev_count":11,"has_kev":17},"8.4.0-150",{"version":94,"cve_count":16,"kev_count":11,"has_kev":17},"9.0.0-073",{"version":96,"cve_count":22,"kev_count":11,"has_kev":17},"9.1.0",{"version":98,"cve_count":99,"kev_count":11,"has_kev":17},"9.1.0-004",3,{"version":101,"cve_count":22,"kev_count":11,"has_kev":17},"9.1.0-031",{"version":103,"cve_count":22,"kev_count":11,"has_kev":17},"9.1.0-033",{"version":105,"cve_count":99,"kev_count":11,"has_kev":17},"9.1.0-103",{"version":107,"cve_count":16,"kev_count":11,"has_kev":17},"9.1.0-31",{"version":109,"cve_count":16,"kev_count":11,"has_kev":17},"9.5.0",{"version":111,"cve_count":22,"kev_count":11,"has_kev":17},"9.6.0",{"version":113,"cve_count":16,"kev_count":11,"has_kev":17},"9.6.6-068",{"version":115,"cve_count":16,"kev_count":11,"has_kev":17},"9.7.0-006","Content Security Management Appliance by Cisco is a technology product with 49 tracked versions and 28 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":16,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},{"version":60,"cve_count":16,"kev_count":11,"has_kev":17},{"version":62,"cve_count":16,"kev_count":11,"has_kev":17},{"version":64,"cve_count":16,"kev_count":11,"has_kev":17},{"version":66,"cve_count":16,"kev_count":11,"has_kev":17},{"version":68,"cve_count":16,"kev_count":11,"has_kev":17},{"version":70,"cve_count":16,"kev_count":11,"has_kev":17},{"version":72,"cve_count":16,"kev_count":11,"has_kev":17},{"version":74,"cve_count":16,"kev_count":11,"has_kev":17},{"version":76,"cve_count":16,"kev_count":11,"has_kev":17},{"version":78,"cve_count":16,"kev_count":11,"has_kev":17},{"version":80,"cve_count":16,"kev_count":11,"has_kev":17},{"version":82,"cve_count":16,"kev_count":11,"has_kev":17},{"version":84,"cve_count":16,"kev_count":11,"has_kev":17},{"version":86,"cve_count":16,"kev_count":11,"has_kev":17},{"version":88,"cve_count":16,"kev_count":11,"has_kev":17},{"version":90,"cve_count":16,"kev_count":11,"has_kev":17},{"version":92,"cve_count":16,"kev_count":11,"has_kev":17},{"version":94,"cve_count":16,"kev_count":11,"has_kev":17},{"version":96,"cve_count":22,"kev_count":11,"has_kev":17},{"version":98,"cve_count":99,"kev_count":11,"has_kev":17},{"version":101,"cve_count":22,"kev_count":11,"has_kev":17},{"version":103,"cve_count":22,"kev_count":11,"has_kev":17},{"version":105,"cve_count":99,"kev_count":11,"has_kev":17},{"version":107,"cve_count":16,"kev_count":11,"has_kev":17},{"version":109,"cve_count":16,"kev_count":11,"has_kev":17},{"version":111,"cve_count":22,"kev_count":11,"has_kev":17},{"version":113,"cve_count":16,"kev_count":11,"has_kev":17},{"version":115,"cve_count":16,"kev_count":11,"has_kev":17},[168,176,183,189,196,202,207,214,220,226],{"cveId":169,"description":170,"publishedDate":171,"cvssScore":172,"cvssVersion":173,"severity":174,"isKev":17,"epssScore":175},"CVE-2016-2183","The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.","2016-09-01",7.5,"v3.1","High",0.94697,{"cveId":177,"description":178,"publishedDate":179,"cvssScore":180,"cvssVersion":181,"severity":174,"isKev":17,"epssScore":182},"CVE-2015-6321","Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance (SMA) devices; and before 7.7.0-725 and 8.x before 8.0.8-113 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug IDs CSCus79774, CSCus79777, and CSCzv95795.","2015-11-06",7.8,"v2",0.02764,{"cveId":184,"description":185,"publishedDate":186,"cvssScore":187,"cvssVersion":181,"severity":174,"isKev":17,"epssScore":188},"CVE-2014-2119","The End User Safelist\u002FBlocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an FTP session that uploads a modified SLBL database file, aka Bug IDs CSCug79377 and CSCug80118.","2014-03-21",8.5,0.02742,{"cveId":190,"description":191,"publishedDate":192,"cvssScore":193,"cvssVersion":181,"severity":194,"isKev":17,"epssScore":195},"CVE-2014-3289","Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor\u002Freports\u002Foverview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888.","2014-06-10",4.3,"Medium",0.02426,{"cveId":197,"description":198,"publishedDate":199,"cvssScore":200,"cvssVersion":181,"severity":194,"isKev":17,"epssScore":201},"CVE-2015-6288","Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service (rapid log-file rollover and application fault) via crafted HTTP requests, aka Bug ID CSCuw09620.","2015-09-14",5,0.02211,{"cveId":203,"description":204,"publishedDate":205,"cvssScore":193,"cvssVersion":181,"severity":194,"isKev":17,"epssScore":206},"CVE-2015-0624","The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and CSCur89639.","2015-02-21",0.02157,{"cveId":208,"description":209,"publishedDate":210,"cvssScore":211,"cvssVersion":212,"severity":194,"isKev":17,"epssScore":213},"CVE-2016-6416","The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to cause a denial of service via a flood of FTP traffic, aka Bug IDs CSCuz82907, CSCuz84330, and CSCuz86065.","2016-10-05",5.9,"v3.0",0.0202,{"cveId":215,"description":216,"publishedDate":217,"cvssScore":218,"cvssVersion":173,"severity":194,"isKev":17,"epssScore":219},"CVE-2019-1983","A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to cause repeated crashes in some internal processes that are running on the affected devices, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of email attachments. An attacker could exploit this vulnerability by sending an email message with a crafted attachment through an affected device. A successful exploit could allow the attacker to cause specific processes to crash repeatedly, resulting in the complete unavailability of both the Cisco Advanced Malware Protection (AMP) and message tracking features and in severe performance degradation while processing email. After the affected processes restart, the software resumes filtering for the same attachment, causing the affected processes to crash and restart again. A successful exploit could also allow the attacker to cause a repeated DoS condition. Manual intervention may be required to recover from this situation.","2020-09-23",5.3,0.01863,{"cveId":221,"description":222,"publishedDate":223,"cvssScore":224,"cvssVersion":181,"severity":194,"isKev":17,"epssScore":225},"CVE-2015-4322","Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, aka Bug ID CSCuv65894.","2015-08-19",5.5,0.01697,{"cveId":227,"description":228,"publishedDate":229,"cvssScore":230,"cvssVersion":173,"severity":194,"isKev":17,"epssScore":231},"CVE-2018-0140","A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.","2018-02-08",6.5,0.01563,[],{"title":234,"metaDescription":235,"keywords":236,"structuredData":237},"Content Security Management Appliance by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Content Security Management Appliance by Cisco covering 49 versions with 28 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Content Security Management Appliance vulnerabilities, Content Security Management Appliance security, Content Security Management Appliance CVE, Cisco Content Security Management Appliance, Content Security Management Appliance threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":238,"@type":239,"name":240,"description":235,"url":241,"manufacturer":242,"applicationCategory":246,"softwareVersion":247,"mainEntity":248},"https:\u002F\u002Fschema.org","SoftwareApplication","Content Security Management Appliance","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fcontent_security_management_appliance",{"@type":243,"name":244,"url":245},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","49 versions tracked",{"@type":249,"name":250,"description":251,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Content Security Management Appliance Security Vulnerabilities","Security vulnerabilities affecting Content Security Management Appliance by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":253,"apiVersion":254},"2026-10-19T01:12:02.222Z","3.0",{"rows":256,"total":11,"capped":17,"failed":11},[],[258,260,262,264,266,268],{"product":259,"cves":22},"content_security_management_appliance_sma_m190",{"product":261,"cves":22},"content_security_management_appliance_sma_m690",{"product":263,"cves":16},"content_security_management_appliance_sma_m390",{"product":265,"cves":16},"content_security_management_appliance_sma_m390x",{"product":267,"cves":16},"content_security_management_appliance_sma_m690x",{"product":269,"cves":16},"content_security_management_appliance_sma_m695"]