Cisco Systems, Inc. CWE-792

A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker could exploit this vulnerability by crafting a URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for an affected device, which cou

A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device.

 This vulnerability is due to improper processing of URLs. An attacker could exploit this vulnerability by crafting a URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for an affected device, which 

Cisco Systems, Inc. AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N

Cisco Systems, Inc. AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

S-Unclear if Scope change occurs

UI-User Interaction not identified

AND
     OR
          *cpe:2.3:o:cisco:asyncos:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:cisco:email_security_appliance_c160:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:email_security_appliance_c170:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:email_security_appliance_c190:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:email_security_appliance_c370:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:email_security_appliance_c370d:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:email_security_appliance_c380:-:*:*:*:*:*:

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NIST CWE-74

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-url-bypass-WbMQqNJh No Types Assigned

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-url-bypass-WbMQqNJh Vendor Advisory