AS
Product
Asyncos
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 20Medium 29Low 0
Watch
Add Asyncos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20393 In wildKEV | 10.0 | Dec 17 | Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability Affected: before 15.0.5-016; 15.5 before 15.5.4-012; 16.0 before 16.0.4-016; before 15.0.2-007; 15.5 before 15.5.4-007; 16.0 before 16.0.4-010 |
| CVE-2026-76519 In wildKEV | 9.8 | Oct 14 | Cisco Secure Email Gateway Arbitrary File Write Vulnerability Affected: 15.0 before 15.5.5-014; 16.0 before 16.5.0-780 |
| CVE-2026-76461 In wildKEV | 9.8 | Sep 14 | Cisco Secure Email Gateway SQL Injection Vulnerability Affected: before 15.5.5-014; 16.0 before 16.0.4-302; 16.5 before 16.5.0-780 |
| CVE-2022-20871 | 8.8 | Nov 15 | Cisco Secure Web Appliance Privilege Escalation Vulnerability Affected: 12.5.1-011; 12.5.2-007; 12.5.2-011; 12.5.3-002; 12.5.4-005; 12.5.4-011; +5 more |
| CVE-2022-20868 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an… Affected: 13.0 before 14.2.1; 12.0 before 14.2.0; 11.8 before 12.5.5; 14.0 before 14.0.4; 14.5 |
| CVE-2021-1359 | 8.8 | Jul 8 | A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection… Affected: 11.8.0 before 12.0.3-005; 12.5.0 before 12.5.2 |
| CVE-2019-15956 | 8.8 | Nov 26 | A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an… Affected: 10.1 before 10.1.5-004; 10.5 before 11.5.3-016; 11.7 before 11.7.1-006 |
| CVE-2019-1947 | 8.6 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause… Affected: 12.1.0-085 |
| CVE-2019-1886 | 8.6 | Jul 4 | A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition Affected: 10.5 before 10.5.5-005; 11.5 before 11.5.2-020 |
| CVE-2018-15460 | 8.6 | Jan 10 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to cause… Affected: before 11.0.2-044_md; 11.1.0 before 11.1.2-023_md |
| CVE-2024-20383 | 8.4 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct an… Affected: before 15.5.1-024 |
| CVE-2024-20435 | 7.8 | Jul 17 | A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root Affected: 11.7.0-406; 11.7.0-418; 11.7.1-006; 11.7.1-020; 11.7.1-049; 11.7.2-011; +21 more |
| CVE-2020-3367 | 7.8 | Nov 18 | A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Security Appliance) could allow an authenticated, local… Affected: before 11.7.2-011; 11.8.0 before 11.8.2-009; 12.0.0 before 12.0.2; 12.5.0 before 12.5.1-011 |
| CVE-2018-0095 | 7.8 | Jan 18 | A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated,… Affected: 9.1.1-005; 9.7.2-065 |
| CVE-2022-20653 | 7.5 | Feb 17 | A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could… Affected: before 13.0.3; 13.5.0 before 13.5.4.102; 14.0 before 14.0.2.020 |
| CVE-2021-34741 | 7.5 | Nov 4 | A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to perform a… Affected: before 13.0.4; 13.5.3-010; 13.7.0-093 |
| CVE-2021-34698 | 7.5 | Oct 6 | A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a… Affected: 12.0 before 12.0.3-005; 12.5 before 12.5.2-007; 14.0 before 14.0.1-014 |
| CVE-2016-1461 | 7.5 | Aug 1 | Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka… Affected: through 9.7.0-125 |
| CVE-2016-1438 | 7.5 | Jun 23 | Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka… Affected: 9.7.0-125 |
| CVE-2021-1566 | 7.4 | Jun 16 | A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance… Affected: before 12.5.3-035; 13.0 before 13.0.0-030; 13.5 before 13.5.3-010; before 11.8.3-021; 12.0.0 before 12.0.3-005; 12.5.0 before 12.5.1-043 |
| CVE-2025-20184 | 7.2 | Feb 5 | Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability Affected: 13.0.0-392; 13.0.5-007; 13.5.1-277; 13.5.4-038; 14.0.0-698; 14.2.0-620; +34 more |
| CVE-2024-20429 | 7.2 | Jul 17 | A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-128; 11.1.0-131; 12.0.0-419; 12.1.0-071; +12 more |
| CVE-2017-12215 | 7.1 | Sep 21 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote attacker to cause an… Affected: 9.0; 9.1; 9.1.2; 9.5; 9.6; 9.7; +1 more |
| CVE-2025-20185 | 6.7 | Feb 5 | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability Affected: 13.0.0-392; 13.0.5-007; 13.5.1-277; 13.5.4-038; 14.0.0-698; 14.2.0-620; +8 more |
| CVE-2021-1425 | 6.5 | Nov 18 | Cisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure Vulnerability Affected: before 13.8.0 |
| CVE-2022-20942 | 6.5 | Nov 3 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known… Affected: before 14.2.1-015; 14.3.0 before 14.3.0-023; before 14.2.0-217; 14.3.0 before 14.3.0-115; before 12.0.5-011; 12.5 before 12.5.4-005; +1 more |
| CVE-2022-20867 | 6.5 | Nov 3 | A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to… Affected: 13.0 before 14.2.1; 12.0 before 14.2.0 |
| CVE-2020-3547 | 6.5 | Sep 4 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and… Affected: through 13.5.1-277; through 13.6.1-193; through 11.7.2-011 |
| CVE-2019-1884 | 6.5 | Jul 4 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of… Affected: 10.1 before 10.5.5-005; 11.5 before 11.5.2-020; 11.7 before 11.7.0-407 |
| CVE-2024-20392 | 6.1 | May 15 | A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-128; 12.0.0-419; 12.1.0-071; 12.1.0-087; +15 more |
| CVE-2024-20258 | 6.1 | May 15 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an unauthenticated,… Affected: before 15.0.2-034; 15.5 before 15.5.1-055; before 15.5.1-024 |
| CVE-2020-3568 | 5.8 | Oct 8 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: through 13.5.2 |
| CVE-2020-3368 | 5.8 | Jun 18 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 13.5.0 |
| CVE-2017-12353 | 5.8 | Nov 30 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated,… Affected: All versions, or not specified |
| CVE-2017-12218 | 5.8 | Sep 7 | A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an… Affected: All versions, or not specified |
| CVE-2018-0087 | 5.6 | Mar 8 | A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a… Affected: 10.5.1-296 |
| CVE-2024-20504 | 5.4 | Nov 6 | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities Affected: 14.0.0-698; 14.2.0-620; 14.2.1-020; 14.3.0-032; 15.0.0-104; 15.0.1-030; +31 more |
| CVE-2022-20781 | 5.4 | Apr 6 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a… Affected: before 14.5 |
| CVE-2020-3122 | 5.3 | Mar 4 | Cisco Content Security Management Appliance Information Disclosure Vulnerability Affected: 11.0.0-128 |
| CVE-2025-20183 | 5.3 | Feb 5 | Cisco Secure Web Appliance Range Request Bypass Vulnerability Affected: 11.8.0-414; 11.8.0-429; 11.8.0-453; 11.8.1-023; 11.8.3-018; 11.8.3-021; +34 more |
| CVE-2020-26082 | 5.3 | Aug 4 | A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 13.5.2 |
| CVE-2023-20215 | 5.3 | Aug 3 | A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule,… Affected: 11.7.0-406; 11.7.0-418; 11.7.1-006; 11.7.1-020; 11.7.1-049; 11.7.2-011; +16 more |
| CVE-2022-20952 | 5.3 | Mar 1 | A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), could allow an… Affected: 11.8 before 14.0.4; 14.5.0 |
| CVE-2023-20057 | 5.3 | Jan 20 | A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL… Affected: All versions, or not specified |
| CVE-2022-20675 | 5.3 | Apr 6 | A vulnerability in the TCP/IP stack of Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Secure Email and Web Manager, formerly Security… Affected: 14.0 before 14.02.0-020; 12.5 before 14.1.0-239; 12.0 before 14.0.2-012 |
| CVE-2021-1534 | 5.3 | Oct 6 | A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass… Affected: before 14.0.1 |
| CVE-2019-1983 | 5.3 | Sep 23 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA)… Affected: before 11.0.1-161; 12.0 through 12.5.0-633; before 11.0.3-251; 12.0 before 12.5.0-059 |
| CVE-2020-3546 | 5.3 | Sep 4 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access… Affected: through 13.5.1 |
| CVE-2017-12303 | 5.3 | Nov 16 | A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated,… Affected: 10.1.1-234; 10.1.1-235 |
| CVE-2025-20180 | 4.8 | Feb 5 | Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability Affected: 12.8.1-002; 12.8.1-021; 13.0.0-249; 13.0.0-277; 13.6.1-201; 13.6.2-023; +32 more |