Product by Cisco
Cisco Secure Email And Web Manager
19 known vulnerabilities in Cisco Secure Email And Web Manager (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-20393 | Cisco Multiple Products Improper Input Validation Vulnerability In CISA KEValso in 2 other products | 10.0 | |
| Critical | CVE-2026-76443 | Cisco Secure Email Gateway Security Hardening Release | 9.8 | |
| Critical | CVE-2026-76440 | Cisco Secure Email Gateway Security Hardening Release | 9.8 | |
| Critical | CVE-2026-76441 | Cisco Secure Email Gateway Security Hardening Release | 9.8 | |
| High | CVE-2023-20009 | Cisco Secure Email: Improper Input Validation | 6.5 | |
| High | CVE-2026-76442 | Cisco Secure Email Gateway Security Hardening Release | 7.5 | |
| Medium | CVE-2022-20942 | Cisco Secure Web Appliance: Exposure of Private Personal Information to an Unauthorized Actor | 6.5 | |
| Medium | CVE-2022-20867 | Cisco Secure Email: SQL Injection | 5.4 | |
| High | CVE-2022-20868 | Cisco Secure Web Appliance: Use of Hard-coded Cryptographic Key | 4.7 | |
| Medium | CVE-2023-20119 | Cisco Secure Email and Web Manager: Cross-site Scripting | 6.1 | |
| Medium | CVE-2022-20772 | Cisco Secure Email: HTTP Request/Response Splitting | 4.7 | |
| Medium | CVE-2020-3122 | Cisco Content Security Management Appliance Information Disclosure Vulnerability | 5.3 | |
| Medium | CVE-2024-20258 | Cisco Secure Email: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-20504 | Cisco Secure Email: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 5.4 | |
| Medium | CVE-2025-20180 | Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability | 4.8 | |
| High | CVE-2024-20383 | Cisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability | 4.8 | |
| Medium | CVE-2025-20207 | Cisco Secure Email: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 | |
| Medium | CVE-2024-20256 | Cisco Secure Email and Web Manager: Cross-site Scripting | 4.8 | |
| Medium | CVE-2025-20185 | Cisco Secure Email: Execution with Unnecessary Privileges | 3.4 |