CVE Feed

    Dashboard / CVE / CVE-2015-0577

    CVE-2015-0577

    Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA), allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCus22925 and CSCup08113.

    Published:Jan 14, 2015
    Last Modified:Apr 12, 2025
    EPS:Jan 14, 2015
    EPSS Score:0.00329
    CVSS Score:4.3

    Affected Products

    Vendor
    Cisco
    Product
    Asyncos

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-20393 (CVSS 10) — A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Ci…
    CVE-2020-3122 (CVSS 5.3) — A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management A…
    CVE-2025-20185 (CVSS 3.4) — A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco S…
    CVE-2025-20184 (CVSS 6.5) — A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway…
    CVE-2025-20183 (CVSS 5.8) — A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco Async…
    CVE-2025-20180 (CVSS 4.8) — A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web…
    CVE-2021-1425 (CVSS 4.3) — A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Se…
    CVE-2022-20871 (CVSS 6.3) — A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, for…
    CVE-2024-20504 (CVSS 5.4) — A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web…
    CVE-2024-20429 (CVSS 6.5) — A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High