AS
Product
Asyncos
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 20Medium 29Low 0
Watch
Add Asyncos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20393 In wildKEV | 10.0 | Dec 17 | Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability Affected: before 15.0.5-016; 15.5 before 15.5.4-012; 16.0 before 16.0.4-016; before 15.0.2-007; 15.5 before 15.5.4-007; 16.0 before 16.0.4-010 |
| CVE-2026-76519 In wildKEV | 9.8 | Oct 14 | Cisco Secure Email Gateway Arbitrary File Write Vulnerability Affected: 15.0 before 15.5.5-014; 16.0 before 16.5.0-780 |
| CVE-2026-76461 In wildKEV | 9.8 | Sep 14 | Cisco Secure Email Gateway SQL Injection Vulnerability Affected: before 15.5.5-014; 16.0 before 16.0.4-302; 16.5 before 16.5.0-780 |
| CVE-2022-20871 | 8.8 | Nov 15 | A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an… Affected: 12.5.1-011; 12.5.2-007; 12.5.2-011; 12.5.3-002; 12.5.4-005; 12.5.4-011; +5 more |
| CVE-2022-20868 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an… Affected: 13.0 before 14.2.1; 12.0 before 14.2.0; 11.8 before 12.5.5; 14.0 before 14.0.4; 14.5 |
| CVE-2021-1359 | 8.8 | Jul 8 | A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection… Affected: 11.8.0 before 12.0.3-005; 12.5.0 before 12.5.2 |
| CVE-2019-15956 | 8.8 | Nov 26 | A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an… Affected: 10.1 before 10.1.5-004; 10.5 before 11.5.3-016; 11.7 before 11.7.1-006 |
| CVE-2019-1947 | 8.6 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause… Affected: 12.1.0-085 |
| CVE-2019-1886 | 8.6 | Jul 4 | A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition Affected: 10.5 before 10.5.5-005; 11.5 before 11.5.2-020 |
| CVE-2018-15460 | 8.6 | Jan 10 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to cause… Affected: before 11.0.2-044_md; 11.1.0 before 11.1.2-023_md |
| CVE-2024-20383 | 8.4 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct an… Affected: before 15.5.1-024 |
| CVE-2024-20435 | 7.8 | Jul 17 | A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root Affected: 11.7.0-406; 11.7.0-418; 11.7.1-006; 11.7.1-020; 11.7.1-049; 11.7.2-011; +21 more |
| CVE-2020-3367 | 7.8 | Nov 18 | A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Security Appliance) could allow an authenticated, local… Affected: before 11.7.2-011; 11.8.0 before 11.8.2-009; 12.0.0 before 12.0.2; 12.5.0 before 12.5.1-011 |
| CVE-2018-0095 | 7.8 | Jan 18 | A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated,… Affected: 9.1.1-005; 9.7.2-065 |
| CVE-2022-20653 | 7.5 | Feb 17 | A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could… Affected: before 13.0.3; 13.5.0 before 13.5.4.102; 14.0 before 14.0.2.020 |
| CVE-2021-34741 | 7.5 | Nov 4 | A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to perform a… Affected: before 13.0.4; 13.5.3-010; 13.7.0-093 |
| CVE-2021-34698 | 7.5 | Oct 6 | A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a… Affected: 12.0 before 12.0.3-005; 12.5 before 12.5.2-007; 14.0 before 14.0.1-014 |
| CVE-2016-1461 | 7.5 | Aug 1 | Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka… Affected: through 9.7.0-125 |
| CVE-2016-1438 | 7.5 | Jun 23 | Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka… Affected: 9.7.0-125 |
| CVE-2021-1566 | 7.4 | Jun 16 | A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance… Affected: before 12.5.3-035; 13.0 before 13.0.0-030; 13.5 before 13.5.3-010; before 11.8.3-021; 12.0.0 before 12.0.3-005; 12.5.0 before 12.5.1-043 |
| CVE-2025-20184 | 7.2 | Feb 5 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote… Affected: 13.0.0-392; 13.0.5-007; 13.5.1-277; 13.5.4-038; 14.0.0-698; 14.2.0-620; +34 more |
| CVE-2024-20429 | 7.2 | Jul 17 | A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-128; 11.1.0-131; 12.0.0-419; 12.1.0-071; +12 more |
| CVE-2017-12215 | 7.1 | Sep 21 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote attacker to cause an… Affected: 9.0; 9.1; 9.1.2; 9.5; 9.6; 9.7; +1 more |
| CVE-2025-20185 | 6.7 | Feb 5 | A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco… Affected: 13.0.0-392; 13.0.5-007; 13.5.1-277; 13.5.4-038; 14.0.0-698; 14.2.0-620; +8 more |
| CVE-2021-1425 | 6.5 | Nov 18 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA) could allow an authenticated,… Affected: before 13.8.0 |
| CVE-2022-20942 | 6.5 | Nov 3 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known… Affected: before 14.2.1-015; 14.3.0 before 14.3.0-023; before 14.2.0-217; 14.3.0 before 14.3.0-115; before 12.0.5-011; 12.5 before 12.5.4-005; +1 more |
| CVE-2022-20867 | 6.5 | Nov 3 | A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to… Affected: 13.0 before 14.2.1; 12.0 before 14.2.0 |
| CVE-2020-3547 | 6.5 | Sep 4 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and… Affected: through 13.5.1-277; through 13.6.1-193; through 11.7.2-011 |
| CVE-2019-1884 | 6.5 | Jul 4 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of… Affected: 10.1 before 10.5.5-005; 11.5 before 11.5.2-020; 11.7 before 11.7.0-407 |
| CVE-2024-20392 | 6.1 | May 15 | A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-128; 12.0.0-419; 12.1.0-071; 12.1.0-087; +15 more |
| CVE-2024-20258 | 6.1 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an unauthenticated,… Affected: before 15.0.2-034; 15.5 before 15.5.1-055; before 15.5.1-024 |
| CVE-2020-3568 | 5.8 | Oct 8 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: through 13.5.2 |
| CVE-2020-3368 | 5.8 | Jun 18 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 13.5.0 |
| CVE-2017-12353 | 5.8 | Nov 30 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated,… Affected: All versions, or not specified |
| CVE-2017-12218 | 5.8 | Sep 7 | A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an… Affected: All versions, or not specified |
| CVE-2018-0087 | 5.6 | Mar 8 | A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a… Affected: 10.5.1-296 |
| CVE-2024-20504 | 5.4 | Nov 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow… Affected: 14.0.0-698; 14.2.0-620; 14.2.1-020; 14.3.0-032; 15.0.0-104; 15.0.1-030; +31 more |
| CVE-2022-20781 | 5.4 | Apr 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a… Affected: before 14.5 |
| CVE-2020-3122 | 5.3 | Mar 4 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to… Affected: 11.0.0-128 |
| CVE-2025-20183 | 5.3 | Feb 5 | A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an… Affected: 11.8.0-414; 11.8.0-429; 11.8.0-453; 11.8.1-023; 11.8.3-018; 11.8.3-021; +34 more |
| CVE-2020-26082 | 5.3 | Aug 4 | A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 13.5.2 |
| CVE-2023-20215 | 5.3 | Aug 3 | A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule,… Affected: 11.7.0-406; 11.7.0-418; 11.7.1-006; 11.7.1-020; 11.7.1-049; 11.7.2-011; +16 more |
| CVE-2022-20952 | 5.3 | Mar 1 | A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), could allow an… Affected: 11.8 before 14.0.4; 14.5.0 |
| CVE-2023-20057 | 5.3 | Jan 20 | A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL… Affected: All versions, or not specified |
| CVE-2022-20675 | 5.3 | Apr 6 | A vulnerability in the TCP/IP stack of Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Secure Email and Web Manager, formerly Security… Affected: 14.0 before 14.02.0-020; 12.5 before 14.1.0-239; 12.0 before 14.0.2-012 |
| CVE-2021-1534 | 5.3 | Oct 6 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 14.0.1 |
| CVE-2019-1983 | 5.3 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA)… Affected: before 11.0.1-161; 12.0 through 12.5.0-633; before 11.0.3-251; 12.0 before 12.5.0-059 |
| CVE-2020-3546 | 5.3 | Sep 4 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access… Affected: through 13.5.1 |
| CVE-2017-12303 | 5.3 | Nov 16 | A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated,… Affected: 10.1.1-234; 10.1.1-235 |
| CVE-2025-20180 | 4.8 | Feb 5 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated,… Affected: 12.8.1-002; 12.8.1-021; 13.0.0-249; 13.0.0-277; 13.6.1-201; 13.6.2-023; +32 more |