CVE-2015-6309

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance (ESA) versions 8.5.6-106 through 9.6.0-042

Description The issue allows remote authenticated users to cause a denial of service, resulting in file-descriptor consumption and device reload, via crafted HTTP requests.

Recommendations For versions 8.5.6-106 through 9.6.0-042, consider restricting access to HTTP requests until a patch is available. As a temporary workaround, limit the number of concurrent HTTP requests to minimize the risk of exploitation.