Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:cisco_secure_email_and_web_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCisco Secure Email And Web Manager (2a667ac1-3269-51eb-ab50-e5646490da14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-76440 vulnerable 2026-09-16 04:32:47.846263 Cisco Secure Email Gateway Security Hardening Release
CRITICAL (9.8)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23.
Published: 2026-09-14T16:08:50.075Z
Updated: 2026-09-15T17:03:57.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76441 vulnerable 2026-09-16 04:32:47.832697 Cisco Secure Email Gateway Security Hardening Release
CRITICAL (9.8)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76441 are related to issues with improper access control that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Published: 2026-09-14T16:08:50.060Z
Updated: 2026-09-15T17:03:57.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76443 vulnerable 2026-09-16 04:32:47.812422 Cisco Secure Email Gateway Security Hardening Release
CRITICAL (9.8)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76443 are related to issues with improper neutralization that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.
Published: 2026-09-14T16:08:59.278Z
Updated: 2026-09-15T17:03:58.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76442 vulnerable 2026-09-16 04:32:47.771399 Cisco Secure Email Gateway Security Hardening Release
HIGH (7.5)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76442 are related to issues with improper validation of specified quantity in input that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-1284.
Published: 2026-09-14T16:09:08.878Z
Updated: 2026-09-16T03:55:36.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20393 vulnerable 2026-06-08 07:08:48.527752 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
CRITICAL (10)
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due to insufficient validation of HTTP requests by the Spam Quarantine feature. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
Published: 2025-12-17T16:47:13.128Z
Updated: 2026-02-26T16:07:31.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20207 vulnerable 2026-06-08 07:08:47.284735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20185 vulnerable 2026-06-08 07:08:46.486354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20180 vulnerable 2026-06-08 07:08:46.045963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20504 vulnerable 2026-06-08 06:27:29.153679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20383 vulnerable 2026-06-08 06:27:24.184082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20258 vulnerable 2026-06-08 06:27:17.924330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20256 vulnerable 2026-06-08 06:27:17.828506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20119 vulnerable 2026-06-08 05:52:40.348961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20009 vulnerable 2026-06-08 05:52:37.480683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-20942 vulnerable 2026-06-08 05:39:58.016460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-20868 vulnerable 2026-06-08 05:39:56.142615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-20867 vulnerable 2026-06-08 05:39:56.136398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-20772 vulnerable 2026-06-08 05:39:54.696197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1425 vulnerable 2026-06-08 05:28:14.520516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3122 vulnerable 2026-06-08 05:25:50.726819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.