Cisco Secure Email
Cisco- Product type
- Other
- Catalog vulnerabilities
- 23
Severity across 23 analyzed records
en
Verify to analyze this security profile
As of 09/14/2026, within CyStack's analyzed data, Cisco Secure Email has 2 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco Secure Email and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-20355Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityMedium |
CVE-2026-20354Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityMedium |
CVE-2025-20393Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability | Exploitation statusKEV | FixNot confirmed | Published12/17/2025 | SeverityCritical |
CVE-2025-20153Cisco ESA mail Bypass | Exploitation statusNot known exploited | FixNot confirmed | Published02/19/2025 | SeverityMedium |
CVE-2025-20207Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityMedium |
CVE-2025-20185Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityLow |
CVE-2025-20184Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityMedium |
CVE-2025-20180Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityMedium |
CVE-2020-3548Cisco Email Security Appliance Denial Of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2024-20504Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20429 | Exploitation statusNot known exploited | FixNot confirmed | Published07/17/2024 | SeverityMedium |
CVE-2024-20401 | Exploitation statusNot known exploited | FixNot confirmed | Published07/17/2024 | SeverityCritical |
CVE-2024-20257 | Exploitation statusNot known exploited | FixNot confirmed | Published05/15/2024 | SeverityMedium |
CVE-2024-20258 | Exploitation statusNot known exploited | FixNot confirmed | Published05/15/2024 | SeverityMedium |
CVE-2024-20392 | Exploitation statusNot known exploited | FixNot confirmed | Published05/15/2024 | SeverityMedium |
CVE-2020-26082 | Exploitation statusNot known exploited | FixNot confirmed | Published08/04/2023 | SeverityMedium |
CVE-2023-20075 | Exploitation statusNot confirmed | FixNot confirmed | Published02/16/2023 | SeverityMedium |
CVE-2023-20009 | Exploitation statusNot confirmed | FixNot confirmed | Published02/16/2023 | SeverityMedium |
CVE-2022-20772 | Exploitation statusNot known exploited | FixNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-20942 | Exploitation statusNot confirmed | FixNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-20960 | Exploitation statusNot confirmed | FixNot confirmed | Published11/03/2022 | SeverityHigh |
CVE-2022-20868 | Exploitation statusNot confirmed | FixNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-20867 | Exploitation statusNot known exploited | FixNot confirmed | Published11/03/2022 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan