CVE-2016-6357: Cisco Email Security Appliance

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass a configured drop filter by using an email with a corrupted attachment. More Information: CSCuz01651. Known Affected Releases: 10.0.9-015 9.7.1-066 9.9.6-026.

Affected products

• Cisco Email Security Appliance: version 9.7.1-066 only; version 9.9.6-026 only

Published 2016-10-28. Last modified 2026-06-17.