Known vulnerabilities in Secure Email Gateway
Vendor:
Cisco Systems, Inc
Software:
Secure Email Gateway
Software CPE:
cpe:2.3:a:cisco_systems:secure_email_gateway:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
13
Public exploits:
0
Known exploited (KEV):
2
Breakdown by Severity Chart
14.0.1-103
14.2.3-102
14.3.0-020
15.5.0-048
15.5.1-001
15.0.3-022
5.0.5-016
12.5.3-041
14.3.0-209
14.2.3-031
15.0.0-085
15.0.0-048
15.0.0-012
14.3.0-023
14.2.1-020
14.2.1-015
14.2.0-620
14.2.0-616
14.0.2-020
14.0.1-033
14.0.0-698
15.0.0-068
16.5.0-748
15.5.3-033
16.5.0-654
16.5.0-555
15.5.3-103
16.0.0-043
15.5.2-021
15.5.3-024
15.5.3-023
15.0.4-007
16.0.2-112
15.5.2-012
15.0.2-034
15.5.3-022
15.5.1-107
15.0.1-105
16.0.0-054
16.0.1-017
16.0.1-019
16.0.3-044
15.5.5-014
16.0.4-302
16.5.0-780
16.0.4-209
16.0.4-207
16.0.4-113
16.0.3
16.0.2
16.0.1
16.5.0
16.0.4-016
15.5.4-012
15.0.5-016
16.0.0-050
15.5.2-018
15.0.3-002
16.0
15.5
15.0
14.2.3-027
15.0.0-097
13.0.5-007
13.5.4-038
14.2.2-004
14.3.0-032
15.0.0-104
15.0.1-030
15.5.1-055
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU149712 - Relative Path Traversal CVE-2026-76440 |
CWE-23 | High | 15.5.5-014, 16.5.0-780 | 14.09.2026 |
SB20260914146 |
||
| #VU149713 - Improper Access Control CVE-2026-76441 |
CWE-284 | High | 15.5.5-014, 16.5.0-780 | 14.09.2026 |
SB20260914146 |
||
| #VU149714 - Improper control of a resource through its lifetime CVE-2026-20353 |
CWE-664 | High | 15.5.5-014, 16.5.0-780 | 14.09.2026 |
SB20260914146 |
||
| #VU149715 - Improper Neutralization CVE-2026-76443 |
CWE-707 | High | 15.5.5-014, 16.5.0-780 | 14.09.2026 |
SB20260914146 |
||
| #VU149716 - Improper Validation of Specified Quantity in Input CVE-2026-76442 |
CWE-1284 | Medium | 15.5.5-014, 16.5.0-780 | 14.09.2026 |
SB20260914146 |
||
| #VU149711 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-76461 |
CWE-89 | Critical | 15.5.5-014, 16.0.4-302, 16.5.0-780 | 14.09.2026 |
SB2026091491 |
||
| #VU146771 - Insufficient Verification of Data Authenticity CVE-2026-20354 |
CWE-345 | Medium | - | 02.09.2026 |
SB2026090284 |
||
| #VU146772 - Improper Validation of Integrity Check Value CVE-2026-20355 |
CWE-354 | Medium | - | 02.09.2026 |
SB2026090284 |
||
| #VU120181 - Improper input validation CVE-2025-20393 |
CWE-20 | Critical | 15.0.5-016, 15.5.4-012, 16.0.4-016 | 17.12.2025 |
SB2025121749 |
||
| #VU103668 - Exposure of sensitive information to an unauthorized actor CVE-2025-20207 |
CWE-200 | Medium | 15.0.3-002, 15.5.2-018, 16.0.0-050 | 06.02.2025 |
SB2025020619 |
||
| #VU94506 - Server-Side Request Forgery (SSRF) CVE-2024-20429 |
CWE-918 | Low | 14.2.3-027, 15.0.0-097, 15.5.1-055 | 17.07.2024 |
SB20240717138 |
||
| #VU94505 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-20401 |
CWE-22 | Critical | 13.0.5-007, 13.5.4-038, 14.2.2-004, 14.3.0-032, 15.0.0-104, 15.0.1-030, 15.5.1-055 | 17.07.2024 |
SB20240717137 |
||
| #VU64421 - Improper Authentication CVE-2022-20798 |
CWE-287 | Critical | - | 15.06.2022 |
SB2022061590 |