Known vulnerabilities in Cisco AsyncOS for Secure Email Gateway

Vendor: Cisco Systems, Inc
Software: Cisco AsyncOS for Secure Email Gateway
Software CPE: cpe:2.3:o:cisco_systems:cisco_asyncos_for_secure_email_gateway:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco AsyncOS for Secure Email Gateway Cisco AsyncOS for Secure Email Gateway is affected by 8 known vulnerabilities: 1 medium, 7 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103670 - Execution with Unnecessary Privileges
CVE-2025-20185		 CWE-250 Low
No
No
 15.5.3-022, 16.0.1-017 06.02.2025 SB2025020621
#VU103669 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20184		 CWE-78 Low
No
No
 16.0.0-050 06.02.2025 SB2025020620
#VU103667 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20180		 CWE-79 Low
No
No
 15.5.3-022, 16.0.1-017 06.02.2025 SB2025020618
#VU100083 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20504		 CWE-79 Low
No
No
 16.0.0-50 07.11.2024 SB2024110771
#VU89586 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-20392		 CWE-113 Medium
No
No
 15.5.1-055 16.05.2024 SB2024051616
#VU89584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20258		 CWE-79 Low
No
No
 15.5.1-055 16.05.2024 SB2024051613
#VU89582 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20257		 CWE-79 Low
No
No
 15.5.1-055 16.05.2024 SB2024051613
#VU77618 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20120		 CWE-79 Low
No
No
 15.0.0-332 22.06.2023 SB2023062221