CVE-2016-6458

A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass content filters configured on an affected device. Email that should have been filtered could instead be forwarded by the device. This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to use a content filter for email attachments that are protected or encrypted. More Information: CSCva52546. Known Affected Releases: 10.0.0-125 9.7.1-066.

• CWE-20

• http://www.securityfocus.com/bid/94074
• http://www.securitytracker.com/id/1037182
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-esaVendor Advisory
• http://www.securityfocus.com/bid/94074
• http://www.securitytracker.com/id/1037182
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-esaVendor Advisory

Published

Nov 19, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6451Multiple vulnerabilities in the web framework code of the Ci…
• CVE-2016-6452A vulnerability in the web-based graphical user interface (G…
• CVE-2016-6453A vulnerability in the web framework code of Cisco Identity …
• CVE-2016-6454A cross-site request forgery (CSRF) vulnerability in the web…
• CVE-2016-6455A vulnerability in the Slowpath of StarOS for Cisco ASR 5500…
• CVE-2016-6457A vulnerability in the Cisco Nexus 9000 Series Platform Leaf…6.5
• CVE-2016-6459Cisco TelePresence endpoints running either CE or TC softwar…
• CVE-2016-6460A vulnerability in the FTP Representational State Transfer A…
• CVE-2016-6461A vulnerability in the HTTP web-based management interface o…
• CVE-2016-6462A vulnerability in the email filtering functionality of Cisc…
• CVE-2016-6463A vulnerability in the email filtering functionality of Cisc…
• CVE-2016-6464A vulnerability in the web management interface of the Cisco…