10.0
Critical
Exploited
CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Not observed so far
Weakness
CWE-20
Description
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due to insufficient validation of HTTP requests by the Spam Quarantine feature. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Email 16.0 | 16.0.0-050 → 16.0.1-017 | No fix stated |
| Cisco Secure Email 15.5 | 15.5.0-048 → 15.5.3-022 | No fix stated |
| Cisco Secure Email 15.0 | 15.0.0-104 → 15.0.3-002 | No fix stated |
| Cisco Secure Email | 14.3.0-032 | No fix stated |
| Cisco Secure Email 14.2 | 14.2.0-620 → 14.2.1-020 | No fix stated |
| Cisco Secure Email | 14.0.0-698 | No fix stated |
| Cisco Secure Email 13.5 | 13.5.1-277 → 13.5.4-038 | No fix stated |
| Cisco Secure Email 13.0 | 13.0.0-392 → 13.0.5-007 | No fix stated |
| Cisco Secure Email and Web Manager 16.0 | 16.0.0-195 → 16.0.2-088 | No fix stated |
Show the 10 other branches Hide the 10 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Email and Web Manager 15.5 | 15.5.1-024 → 15.5.3-017 | No fix stated |
| Cisco Secure Email and Web Manager 15.0 | 15.0.0-334 → 15.0.1-035 | No fix stated |
| Cisco Secure Email and Web Manager | 14.3.0-120 | No fix stated |
| Cisco Secure Email and Web Manager 14.2 | 14.2.0-203 → 14.2.0-224 | No fix stated |
| Cisco Secure Email and Web Manager | 14.1.0-227 | No fix stated |
| Cisco Secure Email and Web Manager | 14.0.0-404 | No fix stated |
| Cisco Secure Email and Web Manager 13.8 | 13.8.1-052 → 13.8.1-108 | No fix stated |
| Cisco Secure Email and Web Manager 13.6 | 13.6.1-201 → 13.6.2-078 | No fix stated |
| Cisco Secure Email and Web Manager 13.0 | 13.0.0-249 → 13.0.0-277 | No fix stated |
| Cisco Secure Email and Web Manager 12.8 | 12.8.1-002 → 12.8.1-021 | No fix stated |
References
- cisco-sa-sma-attack-N9bf4 sec.cloudapps.cisco.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Cisco Secure Email
The 29 CVEs of Cisco Secure Email →
CVE-2026-76519
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
9.8
Critical
CVE-2026-76442
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
7.5
High
CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
9.8
Critical
CVE-2026-76443
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
9.8
Critical