medium6.1
CVE-2016-9202
A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to condu…
Impact
A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the affected interface on an affected device. More Information: CSCvb37346. Known Affected Releases: 9.1.1-036 9.7.1-066.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Email Security Appliance | Versions 9.1.1-036, 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.4.0, 9.4.4-000 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/94799
- http://www.securitytracker.com/id/1037423
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-esa1
- http://www.securityfocus.com/bid/94799
- http://www.securitytracker.com/id/1037423
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-esa1