CVE-2015-6285
Cisco Email Security Appliance - Format String Vulnerability
Title source: ruleDescription
Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via format string specifiers in an HTTP request, aka Bug ID CSCug21497.
Scores
EPSS
0.0044
EPSS Percentile
63.3%
Details
CWE
CWE-134
Status
published
Products (2)
cisco/email_security_appliance
7.6.0
cisco/email_security_appliance
8.0.0
Published
Sep 14, 2015
Tracked Since
Feb 18, 2026