CVE-2018-0140
Estado: ModificadaMedia (6.5)—
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.56%
- Percentil entre todas las CVEs puntuadas: 74
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-200
- CWE-425
Referencias
- http://www.securityfocus.com/bid/103090
- http://www.securitytracker.com/id/1040338
- http://www.securitytracker.com/id/1040339
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm
- http://www.securityfocus.com/bid/103090
- http://www.securitytracker.com/id/1040338
- http://www.securitytracker.com/id/1040339
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-0140",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2018-0140",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-12-02T18:55:19.184419Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Cisco Email Security Appliance and Cisco Content Security Management Appliance",
"versions": [
{
"status": "affected",
"version": "Cisco Email Security Appliance and Cisco Content Security Management Appliance"
}
]
}
]
}
],
"published": "2018-02-08T07:29:01.053",
"references": [
{
"url": "http://www.securityfocus.com/bid/103090",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1040338",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1040339",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@cisco.com"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/103090",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1040338",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1040339",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-esacsm",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-425"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la cuarentena de spam de Cisco Email Security Appliance y Cisco Content Security Management Appliance podría permitir que un atacante remoto autenticado descargue cualquier mensaje de la cuarentena de spam modificando la información de las cadenas del navegador. Esta vulnerabilidad se debe a la ausencia de validación de cuentas de usuario autenticado. Un atacante podría explotar esta vulnerabilidad modificando cadenas del navegador para ver mensajes enviados por otros usuarios a la cuarentena de spam en su compañía. Cisco Bug IDs: CSCvg39759, CSCvg42295."
}
],
"lastModified": "2026-06-17T01:29:55.400",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:email_security_appliance_firmware:9.8.0-112:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6207857A-D150-4D91-AC50-5FCA71E4530A"
},
{
"criteria": "cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.1-087:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8908CBEB-F0FF-4F63-B19B-4BF34AB23A14"
},
{
"criteria": "cpe:2.3:o:cisco:email_security_appliance_firmware:11.0.0-274:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B6BB66-1B7A-4F80-B8E3-D8F7E8F1AF4C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c160:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "50009089-506D-42B4-B34D-CFC719B0395B"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c170:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0E5FD72D-E9E6-451C-9483-EBFDD41C9336"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c190:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2C890DD-36BE-416F-B0D3-FB8AAD5F03BD"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c370:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B8ED62C8-2B7E-47CA-BE16-00E02CA72763"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c370d:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "93AF10FC-7988-446F-86E6-8A4E90762DA0"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c380:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CBA19FA3-6CFE-4D6A-A987-CE49A650BE3E"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c390:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "675068B9-167C-42F9-87DD-FF0146B8ADDC"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c670:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A1149EA5-37D0-4E1F-803D-A7A0658653FE"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c680:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1A2334C4-812A-4C28-B708-EA969C05D4C1"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c690:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4BA67042-D6DD-436D-9E41-475CBD670940"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_c690x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "57AFD49E-F367-4776-85B8-6BD7F57D78C9"
},
{
"criteria": "cpe:2.3:h:cisco:email_security_appliance_x1070:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E312DF25-A961-4682-B374-4A394431F8E3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:content_security_management_appliance:10.0.0-096:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD007BF4-5962-42EF-B374-64752149ACE4"
},
{
"criteria": "cpe:2.3:o:cisco:content_security_management_appliance:10.1.0-037:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D30D450A-E060-41EA-890A-F3C0616006BD"
},
{
"criteria": "cpe:2.3:o:cisco:content_security_management_appliance:10.1.0-052:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BDC7E17-A545-4D87-857A-C545D82AE078"
},
{
"criteria": "cpe:2.3:o:cisco:content_security_management_appliance:11.0.0-115:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70BB0721-EA85-4EF0-B794-307FC690ECDC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:content_security_management_appliance_sma_m190:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "14B41A69-AFB0-4770-A8F4-82393F5B330F"
},
{
"criteria": "cpe:2.3:h:cisco:content_security_management_appliance_sma_m390:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3526625B-A42B-4529-B9A5-5BA4CC38DAA9"
},
{
"criteria": "cpe:2.3:h:cisco:content_security_management_appliance_sma_m390x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A9C3E48C-9A68-4BC7-9C1B-E651F6DCCBC2"
},
{
"criteria": "cpe:2.3:h:cisco:content_security_management_appliance_sma_m690:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CEEF3CE3-2A24-42CB-B73E-A6C6333A93E8"
},
{
"criteria": "cpe:2.3:h:cisco:content_security_management_appliance_sma_m690x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2FB17773-455A-42B0-822F-B43EF0CB9D7E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}