CS
Product
Cisco Secure Email
On CISA KEVExploited in the wild
21
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 6High 5Medium 10Low 0
Watch
Add Cisco Secure Email to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20185 | 6.7 | Feb 5 | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability Affected: 14.0.0-698; 13.5.1-277; 13.0.0-392; 14.2.0-620; 13.0.5-007; 13.5.4-038; +8 more |
| CVE-2022-20942 | 6.5 | Nov 3 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known… Affected: 11.0.3-238; 11.1.0-069; 11.1.0-131; 11.1.0-128; 12.0.0-419; 12.1.0-071; +7 more |
| CVE-2022-20867 | 6.5 | Nov 3 | A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to… Affected: 13.0.0-392; 13.5.1-277; 12.5.0-066; 14.0.0-698; 14.2.0-620 |
| CVE-2026-20355 | 5.9 | Sep 2 | Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty Affected: 14.0.0-698; 13.5.1-277; 13.0.0-392; 14.2.0-620; 13.0.5-007; 13.5.4-038; +18 more |
| CVE-2026-20354 | 5.9 | Sep 2 | Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty Affected: 14.0.0-698; 13.5.1-277; 13.0.0-392; 14.2.0-620; 13.0.5-007; 13.5.4-038; +18 more |
| CVE-2024-20504 | 5.4 | Nov 6 | Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities Affected: 14.0.0-698; 14.2.0-620; 14.2.1-020; 14.3.0-032; 15.0.0-104; 15.0.1-030; +2 more |
| CVE-2025-20153 | 5.3 | Feb 19 | Cisco ESA mail Bypass Affected: 14.0.0-698; 13.5.1-277; 13.0.0-392; 14.2.0-620; 13.0.5-007; 13.5.4-038; +9 more |
| CVE-2022-20772 | 5.3 | Nov 3 | A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response… Affected: 13.5.1-277; 14.0.0-698; 14.2.0-620 |
| CVE-2025-20180 | 4.8 | Feb 5 | Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability Affected: 14.0.0-698; 13.5.1-277; 13.0.0-392; 14.2.0-620; 13.0.5-007; 13.5.4-038; +10 more |
| CVE-2025-20207 | 4.3 | Feb 5 | Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability Affected: 14.0.0-698; 13.5.1-277; 13.0.0-392; 14.2.0-620; 13.0.5-007; 13.5.4-038; +6 more |
Showing 10