Unauthenticated attackers can execute commands as root on Cisco Secure Email Gateway appliances by sending a single malicious email with an attachment.
An unauthenticated remote attacker can exploit improper input validation in Cisco Finesse to forge server-side requests and access limited sensitive data.