Known vulnerabilities in Cisco AsyncOS for Secure Email and Web Manager

Vendor: Cisco Systems, Inc
Software: Cisco AsyncOS for Secure Email and Web Manager
Software CPE: cpe:2.3:o:cisco_systems:cisco_asyncos_for_secure_email_and_web_manager:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco AsyncOS for Secure Email and Web Manager Cisco AsyncOS for Secure Email and Web Manager is affected by 9 known vulnerabilities: 9 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103670 - Execution with Unnecessary Privileges
CVE-2025-20185		 CWE-250 Low
No
No
 15.5.3-017, 16.0.1-010 06.02.2025 SB2025020621
#VU103667 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20180		 CWE-79 Low
No
No
 15.5.3-017, 16.0.1-010 06.02.2025 SB2025020618
#VU100083 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20504		 CWE-79 Low
No
No
 16.0.0-195 07.11.2024 SB2024110771
#VU89585 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20383		 CWE-79 Low
No
No
 15.5.1-024 16.05.2024 SB2024051613
#VU89584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20258		 CWE-79 Low
No
No
 15.5.1-024 16.05.2024 SB2024051613
#VU89581 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20256		 CWE-79 Low
No
No
 15.5.1-024 16.05.2024 SB2024051613
#VU77618 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20120		 CWE-79 Low
No
No
 15.0.0-317 22.06.2023 SB2023062221
#VU77617 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20119		 CWE-79 Low
No
No
 15.0.0-317 22.06.2023 SB2023062221
#VU77616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20028		 CWE-79 Low
No
No
 15.0.0-317 22.06.2023 SB2023062221