CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-12-17
Cisco Secure Email Gateway and Secure Email and Web Manager Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-20393)
[Affected Scope] Cisco Secure Email Gateway and Cisco Secure Email and Web Manager running Cisco AsyncOS Software with the Spam Quarantine feature enabled
[Impact] Unauthenticated, remote attackers can execute arbitrary system commands with root privileges on the underlying operating system
[Mitigation] Apply official Cisco security patches immediately, or restrict/disable external access to the Spam Quarantine feature as a temporary workaround