QwikSec

Security Database

CVE

CWE

Training

CVE-2016-9202

Published: Dec 14, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the affected interface on an affected device. More Information: CSCvb37346. Known Affected Releases: 9.1.1-036 9.7.1-066.

Vendor	Product	Versions
n/a	Cisco Email Security Appliance (ESA)	affected `Cisco Email Security Appliance (ESA)`

References

vdb-entry

x_refsource_SECTRACK

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-esa1

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.