CVE-2016-1315: Cisco Email Security Appliance Firmeware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The proxy engine in Cisco Advanced Malware Protection (AMP), when used with Email Security Appliance (ESA) 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338.

Affected products

• Cisco Email Security Appliance Firmeware: version 9.1.0-032 only; version 9.5.0-201 only; version 9.6.0-051 only; version 9.7.0-125 only; version 9.7.0-782 only

Published 2016-02-12. Last modified 2026-06-17.