Cisco Ironport Postx vulnerabilities

7 CVEs affecting Cisco Ironport Postx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0145, published 2010-02-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-0145, published 2010-02-11. High severity, CVSS 10.0. EPSS: 4.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote…
CVE-2010-0144, published 2010-02-11. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX…
CVE-2010-0143, published 2010-02-11. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX…
CVE-2009-0054, published 2009-01-16. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before…
CVE-2009-0053, published 2009-01-16. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before…
CVE-2009-0056, published 2009-01-16. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4,…
CVE-2009-0055, published 2009-01-16. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4,…