# Cisco Secure Email and Web Manager.

Every CVE that names Cisco Secure Email and Web Manager among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cisco Secure Email Gateway Security Hardening Release](https://agentprime.io/advisories/CVE-2026-76442.md)
  `CVE-2026-76442` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-1284
- [Cisco Secure Email Gateway Security Hardening Release](https://agentprime.io/advisories/CVE-2026-76443.md)
  `CVE-2026-76443` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-707
- [Cisco Secure Email Gateway Security Hardening Release](https://agentprime.io/advisories/CVE-2026-76440.md)
  `CVE-2026-76440` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Path traversal
- [Cisco Secure Email Gateway Security Hardening Release](https://agentprime.io/advisories/CVE-2026-76441.md)
  `CVE-2026-76441` · CVE record: Cisco Cisco Secure Email and Web Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control
- [Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20393.md)
  `CVE-2025-20393` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.32 · Not analysed yet · Published 17 Dec 2025 · Tags: CWE-20
- [Cisco Content Security Management Appliance Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2020-3122.md)
  `CVE-2020-3122` · CVE record: Cisco Cisco IronPort Security Management Appliance and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: Broken access control
- [Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-20207.md)
  `CVE-2025-20207` · CVE record: Cisco Cisco Secure Email and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: Information disclosure
- [Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-20185.md)
  `CVE-2025-20185` · CVE record: Cisco Cisco Secure Email and 2 more · CVSS 3.4 Low · Not analysed yet · Published 5 Feb 2025 · Tags: Privilege escalation
- [Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2025-20180.md)
  `CVE-2025-20180` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: Cross-site scripting (XSS)
- [Cisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1425.md)
  `CVE-2021-1425` · CVE record: Cisco Cisco Secure Email and Web Manager · CVSS 4.3 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Information disclosure
- [Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2024-20504.md)
  `CVE-2024-20504` · CVE record: Cisco Cisco Secure Email and 2 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Cisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2024-20383.md)
  `CVE-2024-20383` · CVE record: Cisco Cisco Secure Email and Web Manager · CVSS 4.8 Medium · Not analysed yet · Published 15 May 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Cisco Secure Web Appliance and others](https://agentprime.io/advisories/CVE-2024-20256.md)
  `CVE-2024-20256` · CVE record: Cisco Cisco Secure Web Appliance and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 15 May 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Cisco Secure Email and others](https://agentprime.io/advisories/CVE-2024-20258.md)
  `CVE-2024-20258` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 15 May 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Cisco Secure Email and Web Manager](https://agentprime.io/advisories/CVE-2023-20119.md)
  `CVE-2023-20119` · CVE record: Cisco Cisco Secure Email and Web Manager · CVSS 6.1 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Cross-site scripting (XSS)
- [Improper input validation in Cisco Secure Email and others](https://agentprime.io/advisories/CVE-2023-20009.md)
  `CVE-2023-20009` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Feb 2023 · Tags: CWE-20
- [HTTP response splitting in Cisco Secure Email and others](https://agentprime.io/advisories/CVE-2022-20772.md)
  `CVE-2022-20772` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Other injection
- [Exposure of personal information in Cisco Secure Web Appliance and others](https://agentprime.io/advisories/CVE-2022-20942.md)
  `CVE-2022-20942` · CVE record: Cisco Cisco Secure Web Appliance and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Information disclosure
- [Hard-coded cryptographic key in Cisco Secure Web Appliance and others](https://agentprime.io/advisories/CVE-2022-20868.md)
  `CVE-2022-20868` · CVE record: Cisco Cisco Secure Web Appliance and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Hard-coded credentials
- [SQL injection in Cisco Secure Email and others](https://agentprime.io/advisories/CVE-2022-20867.md)
  `CVE-2022-20867` · CVE record: Cisco Cisco Secure Email and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: SQL injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-secure-email-and-web-manager>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-secure-email-and-web-manager/>. Everything for agents: <https://agentprime.io/llms.txt>.