CVE-2013-3395: Cisco Content Security Management Appliance

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuh70263, CSCuh70323, and CSCuh26634.

Affected products

• Cisco Content Security Management Appliance: affected versions not specified
• Cisco Email Security Appliance Firmware: affected versions not specified
• Cisco Web Security Appliance: affected versions not specified

Published 2013-07-02. Last modified 2026-06-16.