Cisco Ironport Encryption Appliance vulnerabilities

8 CVEs affecting Cisco Ironport Encryption Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-0340, published 2012-02-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-0145, published 2010-02-11. High severity, CVSS 10.0. EPSS: 4.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote…
CVE-2010-0144, published 2010-02-11. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX…
CVE-2010-0143, published 2010-02-11. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX…
CVE-2009-0054, published 2009-01-16. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before…
CVE-2009-0053, published 2009-01-16. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before…
CVE-2009-0056, published 2009-01-16. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4,…
CVE-2012-0340, published 2012-02-13. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the management interface on the Cisco IronPort Encryption Appliance with software before 6.5.3 allows remote attackers to inject arbitrary web script or…
CVE-2009-0055, published 2009-01-16. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4,…