Secure Email And Web Manager vulnerabilities

3 known vulnerabilities in Secure Email And Web Manager from Cisco. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Cisco Secure Email: Unrestricted Upload of File with Dangerous Type

  CVE-2023-20009Mar 1, 2023CiscoEPSS 2.23%

  A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gai

• 9.8 Critical severity

  Cisco Email Security Appliance (ESA): Improper Authentication

  CVE-2022-20798Jun 15, 2022CiscoEPSS 1.56%

  A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass

• 7.7 High severity

  Cisco Email Security Appliance (ESA): Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-20664Jun 15, 2022CiscoEPSS 1.05%

  A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote attacker to retrieve sensitive information