CVE-2016-1315

The proxy engine in Cisco Advanced Malware Protection (AMP), when used with Email Security Appliance (ESA) 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338.

• CWE-284

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160211-esaampVendor Advisory
• http://www.securitytracker.com/id/1035008Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160211-esaampVendor Advisory
• http://www.securitytracker.com/id/1035008Third Party Advisory, VDB Entry

Published

Feb 12, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1309Multiple cross-site scripting (XSS) vulnerabilities in Cisco…
• CVE-2016-1310Cross-site scripting (XSS) vulnerability in Cisco Unity Conn…
• CVE-2016-1311Cross-site scripting (XSS) vulnerability in the management i…
• CVE-2016-1312The HTTPS inspection engine in the Content Security and Cont…
• CVE-2016-1313Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS…
• CVE-2016-1314Cross-site scripting (XSS) vulnerability in Cisco Unified Co…
• CVE-2016-1316Cisco TelePresence Video Communication Server (VCS) X8.1 thr…
• CVE-2016-1317Cisco Unified Communications Manager 11.5(0.98000.480) allow…
• CVE-2016-1318Cross-site scripting (XSS) vulnerability in Cisco Applicatio…
• CVE-2016-1319Cisco Unified Communications Manager (aka CallManager) 9.1(2…
• CVE-2016-1320The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows loc…
• CVE-2016-1321Cisco Universal Small Cell devices with firmware R2.12 throu…