CVE-2013-5537

no score yetEPSS 1.3%

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2013-10-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:content_security_management_appliance
cisco:email_security_appliance_firmware
cisco:web_security_appliance

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537

Check your stack JSON