Skip to main content

Cisco Releases Security Updates for Multiple Products

Eleven advisories address six High and seven Medium impact vulnerabilities for Cisco ISE, Cisco Email Security Appliance, and other product lines

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Eleven advisories address six High and seven Medium impact vulnerabilities for Cisco ISE, Cisco Email Security Appliance, and other product lines


Affected platforms

The following platforms are known to be affected:

The following platforms are also known to be affected:

  • Cisco Secure Email
  • Web Manager HTTP Response Header Injection Vulnerability

Threat details

Introduction

Cisco has released eleven security advisories to address six High and seven Medium vulnerabilities in multiple products. The High advisories concern cross-site request forgery, Insufficient Access Control, privilege escalation, SQL code injection, and arbitrary code execution. 

An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of a system.


Remediation advice

Affected organisations are encouraged to review the following Cisco Security Advisories and apply the necessary updates.


Remediation steps

Type Step
Patch

Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-csrf-vgNtTpAs
Patch

Cisco Identity Services Engine Insufficient Access Control Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-access-contol-EeufSUCx
Patch

Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esasmawsa-vulns-YRuSW5mD#fs
Patch

Cisco BroadWorks CommPilot Application Software Vulnerabilities


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-ssrf-BJeQfpp#vp
Patch

Cisco Umbrella Stored Cross-Site Scripting Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-xss-LfeYQV3
Patch

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-stor-xss-kpRBWXY
Patch

Cisco Identity Services Engine Software Resource Exhaustion Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sec-atk-dos-zw5RCUYp
Patch

Cisco Identity Services Engine Path Traversal Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-path-trav-f6M7cs6r
Patch

Cisco Email Security Appliance Denial of Service Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-gdghHmbV
Patch

Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Information Disclosure Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnt-sec-infodiscl-BVKKnUG
Patch

Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ESA-HTTP-Inject-nvsycUmR


Last edited: 3 November 2022 4:39 pm