CVE Database
/

CVE-2016-1423

Back to search

CVE-2016-1423

Published: Oct 28, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate a cross-site scripting (XSS) or HTML injection attack. More Information: CSCuz02235. Known Affected Releases: 8.0.2-069. Known Fixed Releases: 9.1.1-038 9.7.2-047.

VendorProductVersions

n/a

Cisco AsyncOS 8.0.2-069

affected
Cisco AsyncOS 8.0.2-069

References

1037113
vdb-entry
x_refsource_SECTRACK
93912
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now