Cisco Secure Email And Web Manager vulnerabilities

7 CVEs affecting Cisco Secure Email And Web Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20120, published 2023-06-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-20798, published 2022-06-15. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance…
CVE-2023-20009, published 2023-03-01. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or…
CVE-2022-20664, published 2022-06-15. High severity, CVSS 7.7. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an…
CVE-2021-1561, published 2021-08-18. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), could allow an authenticated, remote attacker to gain…
CVE-2023-20119, published 2023-06-28. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance (SMA) could allow an…
CVE-2023-20120, published 2023-06-28. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email Security Appliance…
CVE-2023-20028, published 2023-06-28. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email Security Appliance…