CVE-2015-4184: Cisco Email Security Appliance

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733.

Affected products

• Cisco Email Security Appliance: version 3.331-09 only; version 7.5.1-gpl-022 only; version 8.5.6-074 only

Published 2015-06-13. Last modified 2026-06-17.