Advisories · Technology
Cisco Secure Email.
Every CVE that names Cisco Secure Email among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+KEV
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
- Cisco Secure Email
- Path traversal
- CVSS 7.5 High
Cisco Secure Email Gateway Security Hardening Release
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- CWE-1284
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Cisco Secure Email Gateway SQL Injection Vulnerability
- Cisco Secure Email
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Secure Email Gateway Security Hardening Release
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- CWE-707
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Secure Email Gateway Security Hardening Release
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Secure Email Gateway Security Hardening Release
- Cisco Secure Email
- CWE-664
- CVSS 5.9 Medium
Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty
- Cisco Secure Email
- CWE-345
- CVSS 5.9 Medium
Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty
- Cisco Secure Email
- CWE-354
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- CWE-20
- CVSS 5.8 Medium
Cisco ESA mail Bypass
- Cisco Secure Email
- Broken access control
- CVSS 4.3 Medium
Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Information disclosure
- CVSS 3.4 Low
Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Privilege escalation
- CVSS 6.5 Medium
Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability
- Cisco Secure Email
- Cisco Secure Web Appliance
- CWE-20
- CVSS 4.8 Medium
Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Cisco Email Security Appliance Denial Of Service Vulnerability
- Cisco Secure Email
- Denial of service
- CVSS 5.4 Medium
Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Injection in Cisco Secure Email
- Cisco Secure Email
- Other injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Path traversal in Cisco Secure Email
- Cisco Secure Email
- Path traversal
- CVSS 4.8 Medium
Cross-site scripting in Cisco Secure Email
- Cisco Secure Email
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cross-site scripting in Cisco Secure Email and others
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
HTTP response splitting in Cisco Secure Email
- Cisco Secure Email
- Other injection
- CVSS 5.8 Medium
Improper input validation in Cisco Secure Email
- Cisco Secure Email
- CWE-20
- CVSS 6.0 Medium
Command injection in Cisco Secure Email
- Cisco Secure Email
- Command injection
- CVSS 6.5 Medium
Improper input validation in Cisco Secure Email and others
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- CWE-20
- CVSS 4.7 Medium
HTTP response splitting in Cisco Secure Email and others
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- Other injection
- CVSS 6.5 Medium
Exposure of personal information in Cisco Secure Web Appliance and others
- Cisco Secure Web Appliance
- Cisco Secure Email
- Information disclosure
- CVSS 7.5 High
Uncontrolled resource consumption in Cisco Secure Email
- Cisco Secure Email
- Denial of service
- CVSS 4.7 Medium
Hard-coded cryptographic key in Cisco Secure Web Appliance and others
- Cisco Secure Web Appliance
- Cisco Secure Email
- Hard-coded credentials
- CVSS 5.4 Medium
SQL injection in Cisco Secure Email and others
- Cisco Secure Email
- Cisco Secure Email and Web Manager
- SQL injection