CVE-2015-6309: Cisco Email Security Appliance

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service (file-descriptor consumption and device reload) via crafted HTTP requests, aka Bug ID CSCuw32211.

Affected products

• Cisco Email Security Appliance: version 9.6.0-042 only
• Cisco Email Security Appliance Firmware: version 8.5.6-106 only

Published 2015-10-02. Last modified 2026-06-17.