AS
Product
Asyncos
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 20Medium 29Low 0
Watch
Add Asyncos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20871 | 8.8 | Nov 15 | A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an… Affected: 12.5.1-011; 12.5.2-007; 12.5.2-011; 12.5.3-002; 12.5.4-005; 12.5.4-011; +5 more |
| CVE-2022-20868 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an… Affected: 13.0 before 14.2.1; 12.0 before 14.2.0; 11.8 before 12.5.5; 14.0 before 14.0.4; 14.5 |
| CVE-2021-1359 | 8.8 | Jul 8 | A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection… Affected: 11.8.0 before 12.0.3-005; 12.5.0 before 12.5.2 |
| CVE-2019-15956 | 8.8 | Nov 26 | A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an… Affected: 10.1 before 10.1.5-004; 10.5 before 11.5.3-016; 11.7 before 11.7.1-006 |
| CVE-2019-1947 | 8.6 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause… Affected: 12.1.0-085 |
| CVE-2019-1886 | 8.6 | Jul 4 | A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition Affected: 10.5 before 10.5.5-005; 11.5 before 11.5.2-020 |
| CVE-2018-15460 | 8.6 | Jan 10 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to cause… Affected: before 11.0.2-044_md; 11.1.0 before 11.1.2-023_md |
| CVE-2024-20383 | 8.4 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct an… Affected: before 15.5.1-024 |
| CVE-2024-20435 | 7.8 | Jul 17 | A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root Affected: 11.7.0-406; 11.7.0-418; 11.7.1-006; 11.7.1-020; 11.7.1-049; 11.7.2-011; +21 more |
| CVE-2020-3367 | 7.8 | Nov 18 | A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Security Appliance) could allow an authenticated, local… Affected: before 11.7.2-011; 11.8.0 before 11.8.2-009; 12.0.0 before 12.0.2; 12.5.0 before 12.5.1-011 |
| CVE-2018-0095 | 7.8 | Jan 18 | A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated,… Affected: 9.1.1-005; 9.7.2-065 |
| CVE-2022-20653 | 7.5 | Feb 17 | A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could… Affected: before 13.0.3; 13.5.0 before 13.5.4.102; 14.0 before 14.0.2.020 |
| CVE-2021-34741 | 7.5 | Nov 4 | A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to perform a… Affected: before 13.0.4; 13.5.3-010; 13.7.0-093 |
| CVE-2021-34698 | 7.5 | Oct 6 | A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a… Affected: 12.0 before 12.0.3-005; 12.5 before 12.5.2-007; 14.0 before 14.0.1-014 |
| CVE-2016-1461 | 7.5 | Aug 1 | Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka… Affected: through 9.7.0-125 |
| CVE-2016-1438 | 7.5 | Jun 23 | Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka… Affected: 9.7.0-125 |
| CVE-2021-1566 | 7.4 | Jun 16 | A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance… Affected: before 12.5.3-035; 13.0 before 13.0.0-030; 13.5 before 13.5.3-010; before 11.8.3-021; 12.0.0 before 12.0.3-005; 12.5.0 before 12.5.1-043 |
| CVE-2025-20184 | 7.2 | Feb 5 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote… Affected: 13.0.0-392; 13.0.5-007; 13.5.1-277; 13.5.4-038; 14.0.0-698; 14.2.0-620; +34 more |
| CVE-2024-20429 | 7.2 | Jul 17 | A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-128; 11.1.0-131; 12.0.0-419; 12.1.0-071; +12 more |
| CVE-2017-12215 | 7.1 | Sep 21 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote attacker to cause an… Affected: 9.0; 9.1; 9.1.2; 9.5; 9.6; 9.7; +1 more |
Showing 20