Vulnslist

Cisco product, release, and evidence lookup

Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Vulnerabilities

cisco-sa-esa-sma-wsa-multi-yKUJhS34 · Medium · Published · Updated

Data: Cisco advisories · Cisco CSAF · NVD CVEs · NVD CPEs · CISA KEV · EPSS

Multiple vulnerabilities in Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an attacker to execute arbitrary commands locally or remotely.  For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-multi-yKUJhS34

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2025-20184, CVE-2025-20185
Cisco Bug IDsCSCwk70574 , CSCwk70547 , CSCwk70590 , CSCwk70576 , CSCwk70559 , CSCwk98506
CVSS ScoreBase 3.4
Base 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N/E:X/RL:X/RC:X
Base 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:X/RL:X/RC:X

Products with public affected evidence

Product CVE Affected evidence
Cisco Secure Email and Web Manager CVE-2025-20184 structured affected CSAF product_status
Cisco Secure Web Appliance CVE-2025-20184 structured affected CSAF product_status
Cisco Secure Email CVE-2025-20184 structured affected CSAF product_status
Cisco Secure Web Appliance CVE-2025-20185 structured affected CSAF product_status
Cisco Secure Email CVE-2025-20185 structured affected CSAF product_status
Cisco Secure Email and Web Manager CVE-2025-20185 structured affected CSAF product_status