Known vulnerabilities in Cisco AsyncOS for Cisco Email Security Appliance

Software CPE: cpe:2.3:a:cisco_systems:cisco_asyncos_for_cisco_email_security_appliance:*:*:*:*:*:*:*:*
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco AsyncOS for Cisco Email Security Appliance Cisco AsyncOS for Cisco Email Security Appliance is affected by 32 known vulnerabilities: 1 critical, 23 medium, 8 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68970 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-20772
CWE-113 Medium
No
No
14.0.3-015, 14.2.1-015, 14.3.0-023 04.11.2022 SB2022110408
#VU68969 - Incorrect Authorization
CVE-2022-20942
CWE-863 Medium
No
No
14.2.1-015, 14.3.0-023 04.11.2022 SB2022110403
#VU68968 - Resource exhaustion
CVE-2022-20960
CWE-400 Medium
No
No
14.2.1-015, 14.3.0-020 04.11.2022 SB2022110402
#VU68966 - Use of Hard-coded Cryptographic Key
CVE-2022-20868
CWE-321 Medium
No
No
14.2.1-015, 14.3.0-020 03.11.2022 SB2022110337
#VU68965 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-20867
CWE-89 Medium
No
No
14.2.1-015, 14.3.0-020 03.11.2022 SB2022110337
#VU64421 - Improper Authentication
CVE-2022-20798
CWE-287 Critical
No
No
14.0.1-033 15.06.2022 SB2022061590
#VU60660 - Resource Management Errors
CVE-2022-20653
CWE-399 Medium
No
No
13.0.3, 13.5.4.102, 14.0.2.020 16.02.2022 SB2022021621
#VU57954 - Allocation of Resources Without Limits or Throttling
CVE-2021-34741
CWE-770 Medium
No
No
13.0.4, 13.5.4-031, 14.0 04.11.2021 SB2021110412
#VU57118 - Improper input validation
CVE-2021-1534
CWE-20 Medium
No
No
14.0.1 07.10.2021 SB2021100711
#VU54172 - Improper Certificate Validation
CVE-2021-1566
CWE-295 Medium
No
No
12.5.3 035, 13.0.0 030, 13.5.3 010 16.06.2021 SB2021061621
#VU51220 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1425
CWE-200 Low
No
No
- 03.03.2021 SB2021030316
#VU48161 - Improper input validation
CVE-2020-26082
CWE-20 Medium
No
No
13.5.2 05.11.2020 SB2020110541
#VU47526 - Improper input validation
CVE-2020-3568
CWE-20 Medium
No
No
- 08.10.2020 SB2020101306
#VU46249 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3547
CWE-200 Medium
No
No
- 03.09.2020 SB2020090308
#VU46248 - Inefficient Algorithmic Complexity
CVE-2020-3548
CWE-407 Medium
No
No
- 03.09.2020 SB2020090308
#VU46247 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3546
CWE-200 Medium
No
No
- 03.09.2020 SB2020090308
#VU34092 - Information Exposure Through Log Files
CVE-2020-3447
CWE-532 Low
No
No
13.5.1 06.08.2020 SB2020080611
#VU29147 - Improper input validation
CVE-2020-3368
CWE-20 Medium
No
No
13.5.0 18.06.2020 SB2020061816
#VU25788 - Improper input validation
CVE-2020-3164
CWE-20 Medium
No
No
- 05.03.2020 SB2020030511
#VU25787 - Resource exhaustion
CVE-2020-3181
CWE-400 Medium
No
No
- 05.03.2020 SB2020030510


Showing elements 1 - 20 out of 32