CVE-2014-8016: Cisco Ironport Email Security Appliances

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption) via long Subject headers in e-mail messages, aka Bug ID CSCzv93864.

Affected products

• Cisco Ironport Email Security Appliances: any version

Published 2014-12-19. Last modified 2026-06-17.