| Package | Affected versions | Patched versions |
|---|---|---|
| secure email and web manager | = 14.0.0-418= 14.0.1-033= 14.0.1-053= 15.0.0-050= 15.0.0-256 | |
| secure email gateway | = 14.0.0-418= 14.0.1-033= 14.0.1-053= 15.0.0-050= 15.0.0-256 | |
| web security appliance | = 14.0.0-418= 14.0.1-033= 14.0.1-053= 15.0.0-050= 15.0.0-256 |
Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email Security Appliance (ESA); and Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free