CVE-2016-1423

Published: Oct 28, 2016Modified: May 6, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate a cross-site scripting (XSS) or HTML injection attack. More Information: CSCuz02235. Known Affected Releases: 8.0.2-069. Known Fixed Releases: 9.1.1-038 9.7.2-047.

Affected (11)

Products: Cisco: Email Security Appliance

Cisco

1 product

Email Security Appliance

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Cisco Email Security Appliance	Version 8.9.0
Cisco Email Security Appliance	Version 8.9.1-000
Cisco Email Security Appliance	Version 8.9.2-032
Cisco Email Security Appliance	Version 9.0.0-212
Cisco Email Security Appliance	Version 9.0.0-461
Cisco Email Security Appliance	Version 9.0.0
Cisco Email Security Appliance	Version 9.0.5-000
Cisco Email Security Appliance	Version 9.1.0-011
Cisco Email Security Appliance	Version 9.1.0-032
Cisco Email Security Appliance	Version 9.1.0-101
Cisco Email Security Appliance	Version 9.1.0