Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

56 records

Priority CRITICAL 100KEV

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06227 Published 2026-10-14 No fix listed CWE-23
Priority CRITICAL 100KEV

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.4016 Published 2026-09-14 No fix listed CWE-89
Priority CRITICAL 100KEV

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system c…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.32392 Published 2025-12-17 No fix listed CWE-20
Priority LOW 30

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to obtain sensitive network information.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00389 Published 2025-03-04 No fix listed CWE-284
Priority LOW 29

A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authent…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00187 Published 2025-02-05 No fix listed CWE-250
Priority LOW 35

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection att…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00863 Published 2025-02-05 No fix listed CWE-20
Priority LOW 32

A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivi…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00439 Published 2025-02-05 No fix listed CWE-20
Priority LOW 22

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated, remote attacker to conduct a stored cross-site…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00323 Published 2025-02-05 No fix listed CWE-79
Priority LOW 29

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access sensitive informatio…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00531 Published 2024-11-18 No fix listed CWE-201
Priority MEDIUM 42

A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an authenticated, remote attacker to perform a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01917 Published 2024-11-15 No fix listed CWE-78
TI-2024-13428 CVE-2024-20504 · GHSA-r49w-9hvc-8fg7

Cross-site scripting in Cisco Secure Email

Priority LOW 24

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow an authenticated, remote attacker to cond…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00294 Published 2024-11-06 No fix listed CWE-80
TI-2024-13357 CVE-2024-20429 · GHSA-9h6c-2f95-gmf7

Injection in Cisco Secure Email

Priority LOW 35

A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands on an affected device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00621 Published 2024-07-17 No fix listed CWE-74
Priority LOW 38

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interfac…

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00351 Published 2024-05-15 No fix listed CWE-79
TI-2024-13192 CVE-2024-20257 · GHSA-f37v-v67w-4jmp

Cross-site scripting in Cisco Secure Email

Priority LOW 22

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface.r This…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00289 Published 2024-05-15 No fix listed CWE-79
Priority LOW 22

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct an XSS attack again…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00294 Published 2024-05-15 No fix listed CWE-79
TI-2024-13193 CVE-2024-20258 · GHSA-6xj9-2c6f-3mhx

Cross-site scripting in Cisco Secure Email

Priority LOW 27

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an XSS attack aga…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00319 Published 2024-05-15 No fix listed CWE-79
Priority LOW 27

A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00389 Published 2024-05-15 No fix listed CWE-113
Priority LOW 33

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass content filters that are configured on an affec…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00628 Published 2023-08-04 No fix listed CWE-20
Priority LOW 25

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), could allow an unauthenticated, remote attacker to bypass a configur…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00678 Published 2023-02-16 No fix listed CWE-20
TI-2023-06765 CVE-2023-20057 · GHSA-72vc-2hjp-vr3j

Injection in Cisco Email Security Appliance

Priority LOW 25

A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00697 Published 2023-01-19 Fixed in 10.0.1-087 CWE-792
Priority LOW 31

A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), cou…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01092 Published 2022-11-03 No fix listed CWE-359
Priority LOW 39

A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker to elevate privileg…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00797 Published 2022-11-03 No fix listed CWE-321
TI-2022-05426 CVE-2022-20867 · GHSA-hmj5-j6m5-7r84

SQL injection in Cisco Secure Email

Priority LOW 30

A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct SQL injection attacks as root on…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00872 Published 2022-11-03 No fix listed CWE-89
Load more