Cisco Cisco Secure Email

• CVE-2026-76519 Critical 9.8 Exploited Cisco Secure Email Gateway Arbitrary File Write Vulnerability 6.2%
• CVE-2026-76461 Critical 9.8 Exploited Cisco Secure Email Gateway SQL Injection Vulnerability 40.2%
• CVE-2025-20393 Critical 10.0 Exploited Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability 32.4%
• CVE-2026-76442 High 7.5 Cisco Secure Email Gateway Security Hardening Release 0.5%
• CVE-2026-76443 Critical 9.8 Cisco Secure Email Gateway Security Hardening Release 2.4%
• CVE-2026-76440 Critical 9.8 Cisco Secure Email Gateway Security Hardening Release 0.6%
• CVE-2026-20353 Critical 9.8 Cisco Secure Email Gateway Security Hardening Release 0.5%
• CVE-2026-20355 Medium 5.9 Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty 0.2%
• CVE-2026-20354 Medium 5.9 Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty 0.2%
• CVE-2025-20153 Medium 5.8 Cisco ESA mail Bypass 0.4%
• CVE-2025-20207 Medium 4.3 Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability 0.3%
• CVE-2025-20185 Low 3.4 Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability 0.2%
• CVE-2025-20184 Medium 6.5 Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability 0.9%
• CVE-2025-20180 Medium 4.8 Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability 0.3%
• CVE-2020-3548 Medium 5.3 Cisco Email Security Appliance Denial Of Service Vulnerability 0.8%
• CVE-2024-20504 Medium 5.4 Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities 0.3%
• CVE-2024-20429 Medium 6.5 A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands on an affected device 0.6%
• CVE-2024-20401 Critical 9.8 A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying oper 2.3%
• CVE-2024-20257 Medium 4.8 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS attack against a user of 0.3%
• CVE-2024-20258 Medium 6.1 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an unauthenticated, remote attacker to condu 0.3%
• CVE-2024-20392 Medium 6.1 A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. 0.4%
• CVE-2020-26082 Medium 5.8 A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass content filters that are co 0.6%
• CVE-2023-20075 Medium 6.0 Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CL 0.9%
• CVE-2023-20009 Medium 6.5 A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authentica 2.2%
• CVE-2022-20772 Medium 4.7 A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vul 0.7%
• CVE-2022-20942 Medium 6.5 A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known as Cisco Web Security 1.1%
• CVE-2022-20960 High 7.5 A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device. 0.9%
• CVE-2022-20868 Medium 4.7 A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker 0.8%
• CVE-2022-20867 Medium 5.4 A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct SQL injection 0.9%