Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

14 records in Enterprise Chat And Email · all components

TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
TI-2024-13408 CVE-2024-20484 · GHSA-jvmc-2wg5-j9pw

Cisco Enterprise Chat and Email Denial of Service Vulnerability

Priority MEDIUM 40

A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2024-11-06 No fix listed CWE-20
TI-2019-01499 CVE-2019-1877 · GHSA-mcq8-w4cg-w5v4

Cisco Enterprise Chat and Email Attachment Download Vulnerability

Priority LOW 32

A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01437 Published 2019-11-05 Fixed in 12.0(1)ES1 CWE-200
TI-2022-05192 CVE-2022-20633 · GHSA-jvfw-53c8-p9qg

Cisco Enterprise Chat and Email Username Enumeration Vulnerability

Priority LOW 31

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a username enumeration attack against an affected device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00766 Published 2024-11-15 No fix listed CWE-204
TI-2019-01492 CVE-2019-1870 · GHSA-qww2-5xc6-ggf9

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

Priority LOW 30

A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email (ECE) Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the w…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01222 Published 2019-06-05 Fixed in 11.6(1) CWE-79
TI-2019-01328 CVE-2019-1702 · GHSA-gp9m-rwhr-9h35

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerabilities

Priority LOW 30

Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-b…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01211 Published 2019-03-11 No fix listed CWE-79
TI-2022-05193 CVE-2022-20634 · GHSA-pqqw-6g5g-6pqj

Cisco Enterprise Chat and Email Open Redirect Vulnerability

Priority LOW 28

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user to an undesired web page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00623 Published 2024-11-15 No fix listed CWE-601
TI-2022-05191 CVE-2022-20632 · GHSA-h9rr-c3mp-g793

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

Priority LOW 28

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface of an affected device.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00557 Published 2024-11-15 No fix listed CWE-79
TI-2022-05190 CVE-2022-20631 · GHSA-whfc-q27m-6qfm

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

Priority LOW 28

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface of an affected device.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0054 Published 2024-11-15 No fix listed CWE-79
TI-2025-14606 CVE-2025-20310 · GHSA-hqh5-j25x-xrmw

Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability

Priority LOW 27

A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00293 Published 2025-07-02 No fix listed CWE-79
TI-2024-13300 CVE-2024-20367 · GHSA-3xq4-p4mq-3pv4

Cross-site scripting in Cisco Enterprise Chat and Email

Priority LOW 25

A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00373 Published 2024-04-03 No fix listed CWE-79
TI-2022-05361 CVE-2022-20802 · GHSA-mjwp-9g5x-mxxc

Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability

Priority LOW 25

A vulnerability in the web interface of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00636 Published 2022-05-27 No fix listed CWE-79
Open these records in search →