Cisco Cloud Email Security vulnerabilities

2 CVEs affecting Cisco Cloud Email Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3164, published 2020-03-04.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-3132, published 2020-02-19. Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of…
• CVE-2020-3164, published 2020-03-04. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance…