Cisco Cisco Secure Email
29 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76519 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway Arbitrary File Write Vulnerability | CRITICAL 9.8 | 2.2 % | KEV | |
| CVE-2026-76442 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway Security Hardening Release | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76461 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway SQL Injection Vulnerability | CRITICAL 9.8 | 30 % | KEV | |
| CVE-2026-76443 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway Security Hardening Release | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-76440 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway Security Hardening Release | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-20353 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway Security Hardening Release | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-20355 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-20354 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty | MEDIUM 5.9 | 0.2 % | ||
| CVE-2025-20393 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability | CRITICAL 10.0 | 32 % | KEV | |
| CVE-2025-20153 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco ESA mail Bypass | MEDIUM 5.8 | 0.4 % | ||
| CVE-2025-20207 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulne… | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20185 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20184 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability | HIGH 7.2 | 0.9 % | ||
| CVE-2025-20180 | 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2020-3548 | N/A | Cisco Email Security Appliance Denial Of Service Vulnerability | HIGH 7.5 | 0.8 % | ||
| CVE-2024-20504 | 14.0.0-698 ; 14.2.0-620 ; 14.2.1-020 ; … | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-20429 | 11.0.3-238 ; 11.1.0-069 ; 11.1.0-131 ; … | A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacke | HIGH 7.2 | 0.6 % | ||
| CVE-2024-20401 | N/A | A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote | CRITICAL 9.8 | 2.3 % | ||
| CVE-2024-20257 | 11.0.3-238 ; 11.1.0-069 ; 11.1.0-131 ; … | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-20258 | 11.0.3-238 ; 11.1.0-069 ; 11.1.0-131 ; … | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gate | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-20392 | 11.0.3-238 ; 11.1.0-069 ; 11.1.0-128 ; … | A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, rem | MEDIUM 6.1 | 0.4 % | ||
| CVE-2020-26082 | N/A | A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenti | MEDIUM 5.8 | 0.6 % | ||
| CVE-2023-20075 | 13.0.0-392 ; 13.5.1-277 ; 12.5.0-066 ; … | Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These | MEDIUM 6.7 | 0.9 % | ||
| CVE-2023-20009 | 11.0.3-238 ; 11.1.0-069 ; 11.1.0-131 ; … | A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) co | HIGH 7.2 | 2.2 % | ||
| CVE-2022-20772 | 13.5.1-277 ; 14.0.0-698 ; 14.2.0-620 | A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attack | MEDIUM 5.3 | 0.6 % | ||
| CVE-2022-20942 | 11.0.3-238 ; 11.1.0-069 ; 11.1.0-131 ; … | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-20960 | 11.0.3-238 ; 11.1.0-069 ; 11.1.0-131 ; … | A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a | HIGH 7.5 | 0.8 % | ||
| CVE-2022-20868 | 13.0.0-392 ; 13.5.1-277 ; 14.0.0-698 ; … | A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure | HIGH 8.8 | 0.8 % | ||
| CVE-2022-20867 | 13.0.0-392 ; 13.5.1-277 ; 12.5.0-066 ; … | A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allo | MEDIUM 6.5 | 0.8 % |