CVE-2022-20952

CVE-2022-20952 concerns Cisco AsyncOS Software for Cisco Secure Web Appliance (WSA). The issue is a vulnerability in the scanning engines where malformed, encoded traffic is not detected, enabling an unauthenticated, remote attacker to bypass a configured block rule and inject traffic that should...

CVE-2025-20393

CVE-2025-20393 affects Cisco AsyncOS Software on Cisco Secure Email Gateway (SEG) and Cisco Secure Email and Web Manager (SEWM) appliances. The vulnerability stems from improper input validation in the Spam Quarantine feature, allowing unauthenticated remote attackers to execute arbitrary command...

CVE-2022-20653

Cisco ESA/DNS Verification DoS (CVE-2022-20653) affects Cisco AsyncOS for Email Security Appliance. Root cause: insufficient DNS name-resolution error handling in the DANE email verification component, enabling unauthenticated remote DoS via specially formatted emails. Impact: device can become u...

CVE-2024-20435

CVE-2024-20435 affects Cisco Secure Web Appliance (AsyncOS) CLI. The root cause is insufficient input validation in the CLI, allowing an authenticated, local attacker to execute arbitrary commands and elevate to root. The attack requires at least guest credentials and is local, with impact on con...

CVE-2023-20057

CVE-2023-20057 : A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass URL reputation filters by crafting URLs. Root cause: improper URL processing. Impact stated as bypassing con...

CVE-2022-20675

The CVE-2022-20675 vulnerability affects Cisco ESA, WSA, and Cisco Secure Email and Web Manager (formerly Security Management Appliance). It stems from an open TCP port listener on port 199 in the TCP/IP stack, allowing an unauthenticated remote attacker to crash the SNMP service and cause a deni...

CVE-2022-20868

CVE-2022-20868 affects Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance. The root cause is a hardcoded value used to encrypt a token for certain API calls, enabling an authenticated, remote attacker with valid credentials to impersonate anot...

CVE-2019-1886

The CVE-2019-1886 entry describes a DoS in Cisco Web Security Appliance (WSA) due to insufficient validation of SSL server certificates in the HTTPS decryption feature. Attackers can remotely exploit by presenting a malformed certificate to a web server, sent through WSA, to trigger an unexpected...

CVE-2022-20781

The CVE-2022-20781 issue affects Cisco AsyncOS Software for Cisco Web Security Appliance (WSA). The web-based management interface fails to properly validate user-supplied input, allowing an authenticated, remote attacker to inject malicious data into a specific field and trigger a stored cross-s...

CVE-2022-20867

Cisco ESA and Cisco Secure Email and Web Manager expose a web-based management interface vulnerable to SQL injection via improper validation of user-submitted parameters. An attacker with high-privilege credentials can exploit it over the network to read/modify data in the underlying database. Th...

CVE-2019-1884

The CVE-2019-1884 issue affects Cisco Web Security Appliance (WSA) AsyncOS Web Proxy functionality. A vulnerability in input validation for certain HTTP/HTTPS request fields could allow an authenticated, remote attacker to cause the device to stop processing traffic, producing a DoS condition. Th...

CVE-2020-3568

Summary: CVE-2020-3568 affects Cisco Email Security Appliance (ESA) running Cisco AsyncOS. The issue is in the antispam/URL filtering path where insufficient input validation of URLs can allow an unauthenticated, remote attacker to bypass URL reputation filters by crafting a URL in a specific way...

CVE-2022-20871

Cisco Secure Web Appliance (AsyncOS) web management interface is affected by a privilege-escalation vulnerability (CVE-2022-20871) due to insufficient validation of user-supplied input. An authenticated, remote attacker could exploit it via crafted HTTP packets to the web interface, potentially e...

CVE-2021-34741

Cisco Email Security Appliance (ESA) with Cisco AsyncOS contains a DoS vulnerability due to insufficient validation of incoming emails in the email scanning algorithm. An unauthenticated attacker could exhaust CPU resources by sending a crafted email, causing DoS. Public advisories from Cisco doc...

CVE-2025-20184

Cisco CVE-2025-20184 affects the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance. The issue arises from insufficient validation of XML configuration files, allowing an authenticated attacker (with valid admin credentials) to u...

CVE-2024-20392

CVE-2024-20392 describes a vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway. The flaw arises from insufficient input validation of parameters passed to the API, enabling an unauthenticated, remote attacker to perform an HTTP response splitting...

CVE-2019-1947

The CVE-2019-1947 issue affects Cisco Email Security Appliance (ESA) running AsyncOS, where the email message filtering feature mishandles messages with large attachments. This vulnerability can allow an unauthenticated, remote attacker to drive CPU utilization to 100%, creating a denial-of-servi...

CVE-2017-12215

The CVE-2017-12215 entry concerns Cisco AsyncOS Software for the Cisco Email Security Appliance (ESA). A vulnerability in the email message filtering feature allows an unauthenticated, remote attacker to exhaust device memory, causing the filtering process to crash and leading to a DoS as email f...

CVE-2019-15956

The CVE-2019-15956 entry concerns Cisco Web Security Appliance (WSA) AsyncOS Web Management Interface vulnerability. Connected sources confirm an authenticated, remote attacker can exploit improper authorization on a specific URL to perform an unauthorized device reset. The documented impacts inc...

CVE-2021-1359

CVE-2021-1359 affects Cisco AsyncOS Web Security Appliance (WSA) in the configuration management path. The issue arises from insufficient validation of user-supplied XML input in the web interface, allowing an authenticated, remote attacker with a valid account to upload crafted XML configuration...

CVE-2023-20215

CVE-2023-20215 affects Cisco AsyncOS for Cisco Secure Web Appliance. The vulnerability lies in the scanning engines’ handling of certain content-encodings (deflate, and by default lzma/brotli in some cases), enabling an unauthenticated, remote attacker to bypass an explicit block rule and cause t...

CVE-2021-1425

The CVE-2021-1425 issue affects Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA)/Email Security Appliance (ESA). It enables an authenticated, remote attacker to view confidential information by inspecting raw HTTP requests exchanged with the web-based management interf...

CVE-2018-15460

CVE-2018-15460 affects Cisco AsyncOS Software for Cisco Email Security Appliances (ESA). The flaw is in the email message filtering feature, caused by improper filtering of messages that reference whitelisted URLs. An unauthenticated, remote attacker can send a malicious email containing a large ...

CVE-2025-20180

CVE-2025-20180 affects Cisco AsyncOS for Cisco Secure Email and Web Manager and Secure Email Gateway. The flaw is a stored cross-site scripting (XSS) caused by insufficient validation of user input in the web-based management interface. An authenticated attacker with at least Operator privileges ...

CVE-2020-3122

Technical details for CVE-2020-3122 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds.

CVE-2022-20942

CVE-2022-20942 concerns information disclosure in Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance (formerly WSA). The issue stems from weak enforcement of back-end authorization checks, allowing an authenticated, remote attacker to obtain s...

CVE-2020-3368

The CVE affects Cisco AsyncOS on the Cisco Email Security Appliance (ESA), where an input-validation weakness allows an unauthenticated, remote attacker to bypass URL reputation filters by crafting a URL. The root cause is insufficient URL input validation. Impact is bypass of URL filtering, enab...

CVE-2017-12303

Cisco AsyncOS (WSA) AMP file filtering vulnerability (CVE-2017-12303): a mismatch in file hash values allows an unauthenticated remote attacker to bypass the AMP file filter by sending a crafted email attachment. Affects Cisco Web Security Appliance with AsyncOS; exploitation is through ZIP/archi...

CVE-2019-1983

CVE-2019-1983 affects Cisco AsyncOS for ESA and SMA. The vulnerability stems from insufficient input validation of email attachments in the email message filtering feature, allowing an unauthenticated, remote attacker to cause repeated crashes of internal processes, resulting in a DoS and unavail...

CVE-2020-26082

CVE-2020-26082 derives from Cisco AsyncOS (ESA) ’s zip decompression engine, where improper handling of password-protected zip files allows an unauthenticated, remote attacker to bypass configured content filters. The issue affects Cisco Email Security Appliance (ESA) running affected AsyncOS ver...

CVE-2024-20256

The CVE-2024-20256 entry concerns Cisco AsyncOS Web UI vulnerabilities in Cisco Secure Email and Web Manager and Secure Web Appliance. The issue stems from insufficient input validation in the web-based management interface, allowing an authenticated, remote attacker to lure a user into clicking ...

CVE-2024-20258

Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway has a web-based management interface vulnerability that enables cross-site scripting (XSS) due to insufficient input validation. An unauthenticated, remote attacker could lure a user to click a crafted link, al...

CVE-2024-20383

Cisco Secure Email and Web Manager (Cisco AsyncOS) web-based management interface is affected by a stored XSS vulnerability due to insufficient input validation. An authenticated, remote attacker can lure a user to click a crafted link, potentially executing arbitrary script code in the interface...

CVE-2025-20183

The CVE-2025-20183 issue affects Cisco Secure Web Appliance (AsyncOS) where improper handling of crafted HTTP Range headers in the policy-based AVC implementation can let an unauthenticated, remote attacker evade the antivirus scanner and download malware to an endpoint. The core details describe...

CVE-2020-3367

The CVE-2020-3367 issue affects Cisco AsyncOS for the Cisco Secure Web Appliance (WSA). It targets the log subscription subsystem where insufficient validation of user-supplied input enables an authenticated, local attacker to inject commands via the web interface or CLI and elevate to root. Impa...

CVE-2021-34698

CVE-2021-34698 describes a DoS in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) caused by improper memory management. An unauthenticated, remote attacker can exhaust device memory by opening a large number of HTTPS connections, preventing new connections and potentiall...

CVE-2024-20429

The CVE-2024-20429 entry concerns Cisco AsyncOS for Secure Email Gateway. Affected component: the web-based management interface. Root cause: insufficient input validation enabling Server-Side Template Injection. Impact: an authenticated user with Operator privileges could remotely execute arbitr...

CVE-2021-1566

CVE-2021-1566 affects Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) due to improper TLS certificate validation in the AMP for Endpoints integration (AsyncOS). A remote, unauthenticated attacker could perform a man-in-the-middle to intercept traffic between the device...

CVE-2025-20185

CVE-2025-20185 affects Cisco AsyncOS Software (Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance). A vulnerability in the remote access password generation algorithm allows an authenticated, local attacker (with valid administrator credentials) to escalate privile...

CVE-2018-0087

CVE-2018-0087 affects Cisco Web Security Appliance (WSA) via an FTP authentication bypass. Affects AsyncOS for WSA on virtual/hardware appliances running AsyncOS 10.5.1; vulnerability arises from incorrect FTP credential validation. If FTP is enabled on the management interface, an unauthenticate...

CVE-2020-3546

CVE-2020-3546 affects Cisco Email Security Appliance (ESA) running Cisco AsyncOS. The issue stems from insufficient validation of requests to the web-based management interface, allowing an unauthenticated, remote attacker to access sensitive information. Exploitation could disclose IP addresses ...

CVE-2018-0095

CVE-2018-0095 affects Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA). A locally authenticated attacker with at least guest privileges can exploit an incorrect networking configuration in the administrative shell CLI to escalate to root. Cisco released advisor...

CVE-2024-20257

Cisco AsyncOS Web-based management interface in Cisco Secure Email Gateway is affected by an XSS vulnerability due to insufficient input validation. An authenticated remote attacker could entice a user to click a crafted link, leading to arbitrary script execution within the interface or exposure...

CVE-2017-12218

CVE-2017-12218 concerns Cisco AsyncOS AMP malware-detection in Cisco ESAs. The issue is a failure to scan certain EML attachments, allowing an unauthenticated remote attacker to deliver a malware-laden attachment to end users and bypass email content filtering. Affected product: Cisco AsyncOS Sof...

CVE-2016-1461

CVE-2016-1461 affects Cisco AsyncOS on Email Security Appliance (ESA) devices up to 9.7.0-125. The vulnerability stems from the file-type filtering feature: an attacker can craft an email attachment to bypass malware detection. Impact is bypass of malware detection, enabling potential malware del...

CVE-2021-1534

CVE-2021-1534 : A vulnerability in Cisco AsyncOS for Cisco Email Security Appliance (ESA) allows an unauthenticated, remote attacker to bypass URL reputation filters by exploiting improper URL processing. Affected product: Cisco ESA/AsyncOS. Impact: bypass of URL filtering, enabling malicious URL...

CVE-2014-2195

CVE-2014-2195 affects Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA). When Active Directory is enabled, the software does not properly handle group names, enabling a remote attacker to gain role privileges by exploiting group-name similarity (Bug I...

CVE-2017-12353

The CVE-2017-12353 issue affects Cisco AsyncOS Software on Cisco Email Security Appliances (ESA). The MIME scanner component fails to properly handle malformed MIME headers in email attachments, enabling an unauthenticated, remote attacker to bypass configured user filters by sending a crafted MI...

CVE-2024-20504

CVE-2024-20504 is a stored XSS vulnerability in the web-based management interface of Cisco AsyncOS Software used by Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance. The issue stems from insufficient input validation, allowing an authenticated, remote attacker t...

CVE-2020-3547

Cisco AsyncOS software on ESA, SMA, and WSA exposes an information-disclosure vulnerability in the web-based management interface due to an insecure method for masking passwords in HTML. An authenticated, remote attacker connected to the management interface could view the raw HTML and potentiall...