Known vulnerabilities in Enterprise Chat and Email

Vendor: Cisco Systems, Inc

Software: Enterprise Chat and Email

Software CPE: cpe:2.3:a:cisco_systems:enterprise_chat_and_email:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU130283 - Reliance on File Name or Extension of Externally-Supplied File CVE-2026-20172	CWE-646	Medium	No	No	15.0(1)ES202603	07.05.2026	SB2026050712
#VU112133 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20310	CWE-79	Low	No	No	12.6(1)_ES11	03.07.2025	SB2025070334
#VU106918 - Incorrect Regular Expression CVE-2025-20139	CWE-185	High	No	No	12.6 ES 10	03.04.2025	SB2025040312
#VU100090 - Improper input validation CVE-2024-20484	CWE-20	Medium	No	No	12.5(1) ES9, 12.6(1) ES9 ET3	07.11.2024	SB2024110778
#VU88125 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-20367	CWE-79	Low	No	No	12.6(1)_ES7	04.04.2024	SB2024040424
#VU63416 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-20802	CWE-79	Low	No	No	12.6(1) ES2	19.05.2022	SB2022051904
#VU59973 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2022-20634	CWE-601	Medium	No	No	12.6(1)_ES1	25.01.2022	SB2022012507
#VU59972 - Exposure of sensitive information to an unauthorized actor CVE-2022-20633	CWE-200	Medium	No	No	12.6(1)_ES1	25.01.2022	SB2022012507
#VU59971 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-20632	CWE-79	Low	No	No	12.6(1)_ES1	25.01.2022	SB2022012507
#VU59969 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-20631	CWE-79	Low	No	No	12.6(1)_ES1	25.01.2022	SB2022012507