exploitDog

CVE-2015-6285

Опубликовано: 14 сент. 2015

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via format string specifiers in an HTTP request, aka Bug ID CSCug21497.

Ссылки

http://tools.cisco.com/security/center/viewAlert.x?alertId=40844
Vendor Advisory
http://www.securitytracker.com/id/1033531
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=40844
Vendor Advisory
http://www.securitytracker.com/id/1033531
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:cisco:email_security_appliance:7.6.0:*:*:*:*:*:*:*

cpe:2.3:h:cisco:email_security_appliance:8.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00442

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-134

Связанные уязвимости

GHSA-cwqw-mv4m-vqgq

github

больше 3 лет назад

Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via format string specifiers in an HTTP request, aka Bug ID CSCug21497.

EPSS

Процентиль: 63%

0.00442

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-134