AS
Product
Asyncos
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 20Medium 29Low 0
Watch
Add Asyncos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20257 | 4.8 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-128; 11.1.0-131; 12.0.0-419; 12.1.0-071; +16 more |
| CVE-2024-20256 | 4.8 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated,… Affected: 11.7.0-406; 11.7.0-418; 11.7.1-006; 11.7.1-020; 11.7.1-049; 11.7.2-011; +34 more |
| CVE-2015-0605 | – | Feb 7 | The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via… Affected: through 8.5 |
| CVE-2015-0577 | – | Jan 14 | Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content… Affected: All versions, or not specified |
| CVE-2014-3381 | – | Oct 19 | The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance (ESA) does not properly analyze ZIP archives, which allows remote attackers to… Affected: through 8.5 |
| CVE-2014-2195 | – | May 20 | Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names,… Affected: All versions, or not specified |