secure_email vulnerabilities

2 known vulnerabilities in secure_email from Cisco. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Cisco Secure Email: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2024-20429Jul 17, 2024Cisco

  A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands on an affected device. This vulnerability is due to insufficient input validation

• 9.8 Critical severity

  Cisco Secure Email: Absolute Path Traversal

  CVE-2024-20401Jul 17, 2024CiscoEPSS 2.33%

  A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling