https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:40:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07199 bdu:2023-07199 https://cve.radiocsirt.org/vuln/bdu:2023-07199 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0138 certfr-2023-avi-0138 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0138 https://cve.radiocsirt.org/vuln/cisco-sa-esa-sma-privesc-9dvkfpj8 <p>Multiple vulnerabilities in the web UI and CLI of Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an authenticated attacker to perform injection attacks or elevate privileges. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in the web UI and CLI of Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an authenticated attacker to perform injection attacks or elevate privileges. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-esa-sma-privesc-9dvkfpj8 https://cve.radiocsirt.org/vuln/euvd-2026-7908 EUVD-2026-7908 https://cve.radiocsirt.org/vuln/euvd-2026-7908 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20009 <p>A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a [[privilege of operator - validate actual name]]. The vulnerability is due to the processing of a specially crafted SNMP configuration file. An attacker could exploit this vulnerability by authenticating to the targeted device and uploading a specially crafted SNMP configuration file that when uploaded could allow for the execution of commands as root. An exploit could allow the attacker to gain root access on the device.</p> <p>A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a [[privilege of operator - validate actual name]]. The vulnerability is due to the processing of a specially crafted SNMP configuration file. An attacker could exploit this vulnerability by authenticating to the targeted device and uploading a specially crafted SNMP configuration file that when uploaded could allow for the execution of commands as root. An exploit could allow the attacker to gain root access on the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20009 https://cve.radiocsirt.org/vuln/ghsa-rj99-fcj2-r7fw <p>A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a [[privilege of operator - validate actual name]]. The vulnerability is due to the processing of a specially crafted SNMP configuration file. An attacker could exploit this vulnerability by authenticating to the targeted device and uploading a specially crafted SNMP configuration file that when uploaded could allow for the execution of commands as root. An exploit could allow the attacker to gain root access on the device.</p> <p>A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a [[privilege of operator - validate actual name]]. The vulnerability is due to the processing of a specially crafted SNMP configuration file. An attacker could exploit this vulnerability by authenticating to the targeted device and uploading a specially crafted SNMP configuration file that when uploaded could allow for the execution of commands as root. An exploit could allow the attacker to gain root access on the device.</p> https://cve.radiocsirt.org/vuln/ghsa-rj99-fcj2-r7fw https://cve.radiocsirt.org/vuln/gsd-2023-20009 gsd-2023-20009 https://cve.radiocsirt.org/vuln/gsd-2023-20009 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0399 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Email Security Appliance und Cisco AsyncOS ausnutzen, um seine Privilegien zu erhöhen und beliebige Befehle auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Email Security Appliance und Cisco AsyncOS ausnutzen, um seine Privilegien zu erhöhen und beliebige Befehle auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0399