Most recent entries from all

cnvd-2016-12770

2026-10-13T22:37:02.738098+00:00

cnvd-2016-12770

fkie_cve-2016-9202

2026-10-13T22:37:02.738163+00:00

GHSA-f7hh-fg6m-rg54

2026-10-13T22:37:02.738212+00:00

gsd-2016-9202

2026-10-13T22:37:02.738237+00:00

gsd-2016-9202

VAR-201612-0364

2026-10-13T22:37:02.738252+00:00

A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the affected interface on an affected device. More Information: CSCvb37346. Known Affected Releases: 9.1.1-036 9.7.1-066. Vendors have confirmed this vulnerability CSCvb37346 It is released as.A remote attacker could conduct a cross-site scripting attack. A cross-site scripting vulnerability exists in CiscoAsyncOSSoftwareforESA that stems from insufficient filtering of user-submitted input. An attacker could exploit this vulnerability to execute arbitrary script code in a user's browser. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. This issue is being tracked by Cisco Bug ID CSCvb37346