AS
Product
Asyncos
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 20Medium 29Low 0
Watch
Add Asyncos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20185 | 6.7 | Feb 5 | A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco… Affected: 13.0.0-392; 13.0.5-007; 13.5.1-277; 13.5.4-038; 14.0.0-698; 14.2.0-620; +8 more |
| CVE-2021-1425 | 6.5 | Nov 18 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA) could allow an authenticated,… Affected: before 13.8.0 |
| CVE-2022-20942 | 6.5 | Nov 3 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known… Affected: before 14.2.1-015; 14.3.0 before 14.3.0-023; before 14.2.0-217; 14.3.0 before 14.3.0-115; before 12.0.5-011; 12.5 before 12.5.4-005; +1 more |
| CVE-2022-20867 | 6.5 | Nov 3 | A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to… Affected: 13.0 before 14.2.1; 12.0 before 14.2.0 |
| CVE-2020-3547 | 6.5 | Sep 4 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and… Affected: through 13.5.1-277; through 13.6.1-193; through 11.7.2-011 |
| CVE-2019-1884 | 6.5 | Jul 4 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of… Affected: 10.1 before 10.5.5-005; 11.5 before 11.5.2-020; 11.7 before 11.7.0-407 |
| CVE-2024-20392 | 6.1 | May 15 | A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-128; 12.0.0-419; 12.1.0-071; 12.1.0-087; +15 more |
| CVE-2024-20258 | 6.1 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an unauthenticated,… Affected: before 15.0.2-034; 15.5 before 15.5.1-055; before 15.5.1-024 |
| CVE-2020-3568 | 5.8 | Oct 8 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: through 13.5.2 |
| CVE-2020-3368 | 5.8 | Jun 18 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 13.5.0 |
| CVE-2017-12353 | 5.8 | Nov 30 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated,… Affected: All versions, or not specified |
| CVE-2017-12218 | 5.8 | Sep 7 | A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an… Affected: All versions, or not specified |
| CVE-2018-0087 | 5.6 | Mar 8 | A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a… Affected: 10.5.1-296 |
| CVE-2024-20504 | 5.4 | Nov 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow… Affected: 14.0.0-698; 14.2.0-620; 14.2.1-020; 14.3.0-032; 15.0.0-104; 15.0.1-030; +31 more |
| CVE-2022-20781 | 5.4 | Apr 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a… Affected: before 14.5 |
| CVE-2020-3122 | 5.3 | Mar 4 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to… Affected: 11.0.0-128 |
| CVE-2025-20183 | 5.3 | Feb 5 | A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an… Affected: 11.8.0-414; 11.8.0-429; 11.8.0-453; 11.8.1-023; 11.8.3-018; 11.8.3-021; +34 more |
| CVE-2020-26082 | 5.3 | Aug 4 | A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 13.5.2 |
| CVE-2023-20215 | 5.3 | Aug 3 | A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule,… Affected: 11.7.0-406; 11.7.0-418; 11.7.1-006; 11.7.1-020; 11.7.1-049; 11.7.2-011; +16 more |
| CVE-2022-20952 | 5.3 | Mar 1 | A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), could allow an… Affected: 11.8 before 14.0.4; 14.5.0 |
| CVE-2023-20057 | 5.3 | Jan 20 | A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL… Affected: All versions, or not specified |
| CVE-2022-20675 | 5.3 | Apr 6 | A vulnerability in the TCP/IP stack of Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Secure Email and Web Manager, formerly Security… Affected: 14.0 before 14.02.0-020; 12.5 before 14.1.0-239; 12.0 before 14.0.2-012 |
| CVE-2021-1534 | 5.3 | Oct 6 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 14.0.1 |
| CVE-2019-1983 | 5.3 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA)… Affected: before 11.0.1-161; 12.0 through 12.5.0-633; before 11.0.3-251; 12.0 before 12.5.0-059 |
| CVE-2020-3546 | 5.3 | Sep 4 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access… Affected: through 13.5.1 |
| CVE-2017-12303 | 5.3 | Nov 16 | A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated,… Affected: 10.1.1-234; 10.1.1-235 |
| CVE-2025-20180 | 4.8 | Feb 5 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated,… Affected: 12.8.1-002; 12.8.1-021; 13.0.0-249; 13.0.0-277; 13.6.1-201; 13.6.2-023; +32 more |
| CVE-2024-20257 | 4.8 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-128; 11.1.0-131; 12.0.0-419; 12.1.0-071; +16 more |
| CVE-2024-20256 | 4.8 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated,… Affected: 11.7.0-406; 11.7.0-418; 11.7.1-006; 11.7.1-020; 11.7.1-049; 11.7.2-011; +34 more |
Showing 29