CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Email Gateway and Secure Email and Web Manager Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-20393)
[Affected Scope] Cisco Secure Email Gateway and Cisco Secure Email and Web Manager running Cisco AsyncOS Software with the Spam Quarantine feature enabled
[Impact] Unauthenticated, remote attackers can execute arbitrary system commands with root privileges on the underlying operating system
[Mitigation] Apply official Cisco security patches immediately, or restrict/disable external access to the Spam Quarantine feature as a temporary workaround
Cisco ISE and ISE-PIC Unauthenticated Remote Code Execution Vulnerability Advisory (CVE-2025-20281)
[Affected Scope] Specific API endpoints of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC
[Impact] An unauthenticated, remote attacker can execute arbitrary code with root privileges on the underlying operating system by sending a crafted API request
[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the management API ports
Cisco Secure Access Control System (ACS) Java Deserialization Remote Code Execution (CVE-2018-0147)
[Affected Scope] Cisco Secure Access Control System (ACS) prior to release 5.8 Patch 9
[Impact] An unauthenticated, remote attacker can execute arbitrary commands on the affected device with root privileges by sending a crafted serialized Java object
[Mitigation] Immediately upgrade to Cisco ACS 5.8 Patch 9 or later, or restrict network access to vulnerable ports