Cisco Products Multiple Vulnerabilities

Release Date: 8 Apr 2022 4256 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Cisco Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, cross site scripting and security restriction bypass on the targeted system.

Impact

Denial of Service
Cross-Site Scripting
Security Restriction Bypass

System / Technologies affected

Email Security Appliance Cisco AsyncOS Version 14.0
Secure Email and Web Manager Cisco AsyncOS Version 12.5 and earlier
Secure Email and Web Manager Cisco AsyncOS Version 13.8.1
Secure Email and Web Manager Cisco AsyncOS Version 14.0
Secure Email and Web Manager Cisco AsyncOS Version 14.1
Web Security Appliance Cisco AsyncOS Version 11.7
Web Security Appliance Cisco AsyncOS Version 11.8
Web Security Appliance Cisco AsyncOS Version 12.0
Web Security Appliance Cisco AsyncOS Version 12.5
Web Security Appliance Cisco AsyncOS Version 14.0
Web Security Appliance Cisco AsyncOS Version 14.1 and earlier

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Cisco Products Multiple Vulnerabilities

Impact

System / Technologies affected

Solutions

Vulnerability Identifier

Source

Related Link