Unrated severityNVD Advisory· Published Oct 24, 2013· Updated Jun 16, 2026

CVE-2013-5537

Description

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Content Security Management Appliance
cpe:2.3:h:cisco:content_security_management_appliance:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Web Security Appliance
cpe:2.3:h:cisco:web_security_appliance:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Email Security Appliance Firmware2 versions
cpe:2.3:o:cisco:email_security_appliance_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:email_security_appliance_firmware:-:*:*:*:*:*:*:*
- (no CPE)
Cisco Systems, Inc./Content Security Management Appliance (sma)llm-fuzzy
Cisco Systems, Inc./Web Security Appliance \(wsa\)llm-fuzzy

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000