Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-20153


A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been denied to flow through an affected device.   This vulnerability is due to improper handling of email that passes through an affected device. An attacker could exploit this vulnerability by sending a crafted email through the affected device. A successful exploit could allow the attacker to bypass email filters on the affected device.


Published

2025-02-19T16:15:40.860

Last Modified

2025-07-31T12:40:47.020

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.8 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-284
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco secure_email_gateway 13.0.0-392 Yes
Application cisco secure_email_gateway 13.0.5-007 Yes
Application cisco secure_email_gateway 13.5.1-277 Yes
Application cisco secure_email_gateway 13.5.4-038 Yes
Application cisco secure_email_gateway 14.0.0-698 Yes
Application cisco secure_email_gateway 14.2.0-620 Yes
Application cisco secure_email_gateway 14.2.1-020 Yes
Application cisco secure_email_gateway 14.3.0-032 Yes
Application cisco secure_email_gateway 15.0.0-104 Yes
Application cisco secure_email_gateway 15.0.1-030 Yes
Application cisco secure_email_gateway 15.0.3-002 Yes
Application cisco secure_email_gateway 15.5.0-048 Yes
Application cisco secure_email_gateway 15.5.1-055 Yes
Application cisco secure_email_gateway 15.5.2-018 Yes
Application cisco secure_email_gateway 16.0.0-050 Yes

References