Cisco Cisco Secure Email and Web Manager

• CVE-2025-20393 Critical 10.0 Exploited Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability 32.4%
• CVE-2026-76442 High 7.5 Cisco Secure Email Gateway Security Hardening Release 0.5%
• CVE-2026-76443 Critical 9.8 Cisco Secure Email Gateway Security Hardening Release 2.4%
• CVE-2026-76440 Critical 9.8 Cisco Secure Email Gateway Security Hardening Release 0.6%
• CVE-2026-76441 Critical 9.8 Cisco Secure Email Gateway Security Hardening Release 0.5%
• CVE-2020-3122 Medium 5.3 Cisco Content Security Management Appliance Information Disclosure Vulnerability 0.4%
• CVE-2025-20207 Medium 4.3 Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability 0.3%
• CVE-2025-20185 Low 3.4 Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability 0.2%
• CVE-2025-20180 Medium 4.8 Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability 0.3%
• CVE-2021-1425 Medium 4.3 Cisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure Vulnerability 0.5%
• CVE-2024-20504 Medium 5.4 Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities 0.3%
• CVE-2024-20383 Medium 4.8 Cisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability 0.4%
• CVE-2024-20256 Medium 4.8 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct 0.3%
• CVE-2024-20258 Medium 6.1 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an unauthenticated, remote attacker to condu 0.3%
• CVE-2023-20119 Medium 6.1 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance (SMA) could allow an una 0.5%
• CVE-2023-20009 Medium 6.5 A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authentica 2.2%
• CVE-2022-20772 Medium 4.7 A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vul 0.7%
• CVE-2022-20942 Medium 6.5 A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known as Cisco Web Security 1.1%
• CVE-2022-20868 Medium 4.7 A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker 0.8%
• CVE-2022-20867 Medium 5.4 A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct SQL injection 0.9%