Enterprise Chat And Email (Cisco) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 110 known versions, newest CVE from 2025-07-02. Vendor: Cisco.
CVEs of Enterprise Chat And Email
- CVE-2025-20310 - CVSS 6.1 (medium), 2025-07-02: A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site…
- CVE-2025-20139 - CVSS 7.5 (high), 2025-04-02: A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of…
- CVE-2022-20633 - CVSS 5.3 (medium), 2024-11-15: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a username enumeration…
- CVE-2022-20632 - CVSS 6.1 (medium), 2024-11-15: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a…
- CVE-2022-20634 - CVSS 6.1 (medium), 2024-11-15: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user to an undesired web…
- CVE-2022-20631 - CVSS 6.1 (medium), 2024-11-15: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a…
- CVE-2024-20484 - CVSS 7.5 (high), 2024-11-06: A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote…
- CVE-2024-20367 - CVSS 5.4 (medium), 2024-04-03: A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)…
- CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
- CVE-2022-20802 - CVSS 5.4 (medium), 2022-05-27: A vulnerability in the web interface of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting…
- CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
- CVE-2019-1877 - CVSS 6.5 (medium), 2019-11-05: A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat…
- CVE-2019-1870 - CVSS 6.1 (medium), 2019-06-05: A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email (ECE) Center could allow an unauthenticated, remote attacker to…
- CVE-2019-1702 - CVSS 6.1 (medium), 2019-03-11: Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a…
