Product by Cisco
Cisco Enterprise Chat and Email
14 known vulnerabilities in Cisco Enterprise Chat and Email (Cisco), 2 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
2
Actively exploited (KEV)
1
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 74 other products | 10.0 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 160 other products | 7.5 | |
| Medium | CVE-2019-1877 | Cisco Enterprise Chat and Email Attachment Download Vulnerability | 6.5 | |
| Medium | CVE-2019-1870 | Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability | 6.1 | |
| Medium | CVE-2019-1702 | Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerabilities | 6.1 | |
| High | CVE-2025-20139 | Cisco Enterprise Chat and Email: Incorrect Regular Expression | 7.5 | |
| High | CVE-2024-20484 | Cisco Enterprise Chat and Email Denial of Service Vulnerability | 7.5 | |
| Medium | CVE-2022-20633 | Cisco Enterprise Chat and Email Username Enumeration Vulnerability | 5.3 | |
| Medium | CVE-2022-20632 | Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability | 6.1 | |
| Medium | CVE-2022-20631 | Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability | 6.1 | |
| Medium | CVE-2022-20634 | Cisco Enterprise Chat and Email Open Redirect Vulnerability | 4.7 | |
| Medium | CVE-2022-20802 | Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability | 5.4 | |
| Medium | CVE-2025-20310 | Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability | 6.1 | |
| Medium | CVE-2024-20367 | Cisco Enterprise Chat and Email: Cross-site Scripting | 5.4 |
News
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert