Cisco Ironport Email Security Appliances — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Ironport Email Security Appliances, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2014-8016 — CVSS 5.0 (medium): The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption) via long Subject…
• CVE-2009-1162 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X…