CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2119

The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an FTP session that uploads a modified SLBL database file, aka Bug IDs CSCug79377 and CSCug80118.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 79.3%

CVSS Severity

CVSS v2 Score 8.5

References

Products affected by CVE-2014-2119

Cisco » Content Security Management Appliance » Version: N/A

cpe:2.3:h:cisco:content_security_management_appliance:-
Cisco » Email Security Appliance Firmware » Version: N/A

cpe:2.3:o:cisco:email_security_appliance_firmware:-
Cisco » Ironport Asyncos » Version: Any

cpe:2.3:o:cisco:ironport_asyncos:*
Cisco » Ironport Asyncos » Version: 8.0

cpe:2.3:o:cisco:ironport_asyncos:8.0
Cisco » Ironport Asyncos » Version: 8.0.1

cpe:2.3:o:cisco:ironport_asyncos:8.0.1
Cisco » Ironport Asyncos » Version: 8.1

cpe:2.3:o:cisco:ironport_asyncos:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2119

Products

Pricing

Contact Us