Advisories · Technology
Cisco Secure Email and Web Manager.
Every CVE that names Cisco Secure Email and Web Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Cisco Secure Email Gateway Security Hardening Release
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- CWE-1284
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Secure Email Gateway Security Hardening Release
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- CWE-707
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Secure Email Gateway Security Hardening Release
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Secure Email Gateway Security Hardening Release
- Cisco Secure Email and Web Manager
- Broken access control
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- CWE-20
- CVSS 5.3 Medium
Cisco Content Security Management Appliance Information Disclosure Vulnerability
- Cisco IronPort Security Management Appliance
- Cisco Secure Email and Web Manager
- Broken access control
- CVSS 4.3 Medium
Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Information disclosure
- CVSS 3.4 Low
Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Privilege escalation
- CVSS 4.8 Medium
Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Cisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure Vulnerability
- Cisco Secure Email and Web Manager
- Information disclosure
- CVSS 5.4 Medium
Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Cisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Cross-site scripting in Cisco Secure Web Appliance and others
- Cisco Secure Web Appliance
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cross-site scripting in Cisco Secure Email and others
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cross-site scripting in Cisco Secure Email and Web Manager
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Improper input validation in Cisco Secure Email and others
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- CWE-20
- CVSS 4.7 Medium
HTTP response splitting in Cisco Secure Email and others
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Other injection
- CVSS 6.5 Medium
Exposure of personal information in Cisco Secure Web Appliance and others
- Cisco Secure Web Appliance
- Cisco Secure Email
- Information disclosure
- CVSS 4.7 Medium
Hard-coded cryptographic key in Cisco Secure Web Appliance and others
- Cisco Secure Web Appliance
- Cisco Secure Email
- Hard-coded credentials
- CVSS 5.4 Medium
SQL injection in Cisco Secure Email and others
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- SQL injection