CVE-2013-5537: Cisco Content Security Management Appliance

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.

Affected products

• Cisco Content Security Management Appliance: affected versions not specified
• Cisco Email Security Appliance Firmware: affected versions not specified
• Cisco Web Security Appliance: affected versions not specified

Published 2013-10-24. Last modified 2026-06-16.