CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-0140

A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.3%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

Products affected by CVE-2018-0140

Cisco » Content Security Management Appliance Sma M190 » Version: N/A

cpe:2.3:h:cisco:content_security_management_appliance_sma_m190:-
Cisco » Content Security Management Appliance Sma M390 » Version: N/A

cpe:2.3:h:cisco:content_security_management_appliance_sma_m390:-
Cisco » Content Security Management Appliance Sma M390x » Version: N/A

cpe:2.3:h:cisco:content_security_management_appliance_sma_m390x:-
Cisco » Content Security Management Appliance Sma M690 » Version: N/A

cpe:2.3:h:cisco:content_security_management_appliance_sma_m690:-
Cisco » Content Security Management Appliance Sma M690x » Version: N/A

cpe:2.3:h:cisco:content_security_management_appliance_sma_m690x:-
Cisco » Email Security Appliance C160 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c160:-
Cisco » Email Security Appliance C170 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c170:-
Cisco » Email Security Appliance C190 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c190:-
Cisco » Email Security Appliance C370 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c370:-
Cisco » Email Security Appliance C370d » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c370d:-
Cisco » Email Security Appliance C380 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c380:-
Cisco » Email Security Appliance C390 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c390:-
Cisco » Email Security Appliance C670 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c670:-
Cisco » Email Security Appliance C680 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c680:-
Cisco » Email Security Appliance C690 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c690:-
Cisco » Email Security Appliance C690x » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_c690x:-
Cisco » Email Security Appliance X1070 » Version: N/A

cpe:2.3:h:cisco:email_security_appliance_x1070:-
Cisco » Content Security Management Appliance » Version: 10.0.0-096

cpe:2.3:o:cisco:content_security_management_appliance:10.0.0-096
Cisco » Content Security Management Appliance » Version: 10.1.0-037

cpe:2.3:o:cisco:content_security_management_appliance:10.1.0-037
Cisco » Content Security Management Appliance » Version: 10.1.0-052

cpe:2.3:o:cisco:content_security_management_appliance:10.1.0-052
Cisco » Content Security Management Appliance » Version: 11.0.0-115

cpe:2.3:o:cisco:content_security_management_appliance:11.0.0-115
Cisco » Email Security Appliance Firmware » Version: 10.0.1-087

cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.1-087
Cisco » Email Security Appliance Firmware » Version: 11.0.0-274

cpe:2.3:o:cisco:email_security_appliance_firmware:11.0.0-274
Cisco » Email Security Appliance Firmware » Version: 9.8.0-112

cpe:2.3:o:cisco:email_security_appliance_firmware:9.8.0-112

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-0140

Products

Pricing

Contact Us