Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Vendor: Cisco Component: Enterprise Chat And Email Clear all filters
TI-2025-14606 CVE-2025-20310 · GHSA-hqh5-j25x-xrmw

Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability

Priority LOW 27

A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00293 Published 2025-07-02 No fix listed CWE-79
TI-2022-05192 CVE-2022-20633 · GHSA-jvfw-53c8-p9qg

Cisco Enterprise Chat and Email Username Enumeration Vulnerability

Priority LOW 31

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a username enumeration attack against an affected device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00766 Published 2024-11-15 No fix listed CWE-204
TI-2022-05191 CVE-2022-20632 · GHSA-h9rr-c3mp-g793

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

Priority LOW 28

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface of an affected device.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00557 Published 2024-11-15 No fix listed CWE-79
TI-2022-05190 CVE-2022-20631 · GHSA-whfc-q27m-6qfm

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

Priority LOW 28

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface of an affected device.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0054 Published 2024-11-15 No fix listed CWE-79
TI-2022-05193 CVE-2022-20634 · GHSA-pqqw-6g5g-6pqj

Cisco Enterprise Chat and Email Open Redirect Vulnerability

Priority LOW 28

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user to an undesired web page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00623 Published 2024-11-15 No fix listed CWE-601
TI-2024-13408 CVE-2024-20484 · GHSA-jvmc-2wg5-j9pw

Cisco Enterprise Chat and Email Denial of Service Vulnerability

Priority MEDIUM 40

A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2024-11-06 No fix listed CWE-20
TI-2024-13300 CVE-2024-20367 · GHSA-3xq4-p4mq-3pv4

Cross-site scripting in Cisco Enterprise Chat and Email

Priority LOW 25

A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00373 Published 2024-04-03 No fix listed CWE-79
TI-2022-05361 CVE-2022-20802 · GHSA-mjwp-9g5x-mxxc

Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability

Priority LOW 25

A vulnerability in the web interface of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00636 Published 2022-05-27 No fix listed CWE-79
TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
TI-2019-01499 CVE-2019-1877 · GHSA-mcq8-w4cg-w5v4

Cisco Enterprise Chat and Email Attachment Download Vulnerability

Priority LOW 32

A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01437 Published 2019-11-05 Fixed in 12.0(1)ES1 CWE-200
TI-2019-01492 CVE-2019-1870 · GHSA-qww2-5xc6-ggf9

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

Priority LOW 30

A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email (ECE) Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the w…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01222 Published 2019-06-05 Fixed in 11.6(1) CWE-79
TI-2019-01328 CVE-2019-1702 · GHSA-gp9m-rwhr-9h35

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerabilities

Priority LOW 30

Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-b…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01211 Published 2019-03-11 No fix listed CWE-79