CVE-2025-20180

🗓️ 05 Feb 2025 17:15:25Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 7 Views

Vulnerability in Cisco AsyncOS allows remote XSS attack via insufficient input validation.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability in the web interface of the Cisco AsyncOS operating system allows attackers to perform cross-site scripting attacks.	10 Mar 202500:00	–	bdu_fstec
Circl	CVE-2025-20180	5 Feb 202516:21	–	circl
Cisco	Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability	5 Feb 202516:00	–	cisco
Tenable Nessus	Cisco Secure Email Gateway XSS (cisco-sa-esa-sma-xss-WCk2WcuG)	11 Feb 202500:00	–	nessus
Tenable Nessus	Cisco Secure Email and Web Manager XSS (cisco-sa-esa-sma-xss-WCk2WcuG)	11 Feb 202500:00	–	nessus
CNNVD	Cisco AsyncOS 跨站脚本漏洞	5 Feb 202500:00	–	cnnvd
CNVD	Cisco AsyncOS Cross-Site Scripting Vulnerability (CNVD-2025-03528)	18 Feb 202500:00	–	cnvd
CVE	CVE-2025-20180	5 Feb 202516:14	–	cve
Cvelist	CVE-2025-20180 Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability	5 Feb 202516:14	–	cvelist
EUVD	EUVD-2025-2170	3 Oct 202520:07	–	euvd

NVD

Node

cisco asyncosMatch12.8.1-002

OR

cisco asyncosMatch12.8.1-021

OR

cisco asyncosMatch13.0.0-249

OR

cisco asyncosMatch13.0.0-277

OR

cisco asyncosMatch13.6.1-201

OR

cisco asyncosMatch13.6.2-023

OR

cisco asyncosMatch13.6.2-078

OR

cisco asyncosMatch13.8.1-052

OR

cisco asyncosMatch13.8.1-068

OR

cisco asyncosMatch13.8.1-074

OR

cisco asyncosMatch13.8.1-108

OR

cisco asyncosMatch14.0.0-404

OR

cisco asyncosMatch14.1.0-227

OR

cisco asyncosMatch14.2.0-203

OR

cisco asyncosMatch14.2.0-212

OR

cisco asyncosMatch14.2.0-224

OR

cisco asyncosMatch14.3.0-120

OR

cisco asyncosMatch15.0.0-334

OR

cisco asyncosMatch15.5.1-024

OR

cisco asyncosMatch15.5.1-029

OR

cisco asyncosMatch15.5.2-005

OR

cisco asyncosMatch16.0.0-195

AND

cisco secure_email_and_web_manager_virtual_appliance_m100vMatch-

OR

cisco secure_email_and_web_manager_virtual_appliance_m300vMatch-

OR

cisco secure_email_and_web_manager_virtual_appliance_m600vMatch-

OR

cisco secure_email_and_web_manager_m170Match-

OR

cisco secure_email_and_web_manager_m190Match-

OR

cisco secure_email_and_web_manager_m195Match-

OR

cisco secure_email_and_web_manager_m380Match-

OR

cisco secure_email_and_web_manager_m390Match-

OR

cisco secure_email_and_web_manager_m390xMatch-

OR

cisco secure_email_and_web_manager_m395Match-

OR

cisco secure_email_and_web_manager_m680Match-

OR

cisco secure_email_and_web_manager_m690Match-

OR

cisco secure_email_and_web_manager_m690xMatch-

OR

cisco secure_email_and_web_manager_m695Match-

Node

cisco asyncosMatch13.0.0-392

OR

cisco asyncosMatch13.0.5-007

OR

cisco asyncosMatch13.5.1-277

OR

cisco asyncosMatch13.5.4-038

OR

cisco asyncosMatch14.0.0-698

OR

cisco asyncosMatch14.2.0-620

OR

cisco asyncosMatch14.2.1-020

OR

cisco asyncosMatch14.3.0-032

OR

cisco asyncosMatch15.0.0-104

OR

cisco asyncosMatch15.0.1-030

OR

cisco asyncosMatch15.0.3-002

OR

cisco asyncosMatch15.5.0-048

OR

cisco asyncosMatch15.5.1-055

OR

cisco asyncosMatch15.5.2-018

OR

cisco asyncosMatch16.0.0-050

OR

cisco asyncosMatch16.0.0-054

AND

cisco secure_email_gateway_virtual_appliance_c100vMatch-

OR

cisco secure_email_gateway_virtual_appliance_c300vMatch-

OR

cisco secure_email_gateway_virtual_appliance_c600vMatch-

OR

cisco secure_email_gateway_c195Match-

OR

cisco secure_email_gateway_c395Match-

OR

cisco secure_email_gateway_c695Match-

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-xss-WCk2WcuG

15 Aug 2025 20:36Current

CVSS 3.14.8

EPSS0.0005

cve 2025 20180 cisco asyncos web management interface cross-site scripting remote attacker user input