cisco email security appliance

Name: cisco email security appliance
Brand: cisco

productUS

cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical21high23medium0low

updated 2026-10-23

vulnerabilities (45)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-20009US	high7.2	1.27% (70th)	Exploit	13.5.4-038	2023-03-01	5 versions
CVE-2023-20075US	medium6.7	0.45% (38th)	Exploit	12.5.3-041	2023-03-01	5 versions
CVE-2016-1405US	high7.5	3.41% (89th)	—	no fix	2016-06-08	= 9.6.0-042
CVE-2016-1481US	high7.5	3.02% (87th)	—	no fix	2016-10-28	30 versions
CVE-2016-6356US	high7.5	3.00% (87th)	—	no fix	2016-10-28	56 versions
CVE-2016-1486US	high7.5	3.00% (87th)	—	no fix	2016-10-28	30 versions
CVE-2018-0419US	high7.5	2.78% (86th)	—	no fix	2018-08-15	—
CVE-2015-6321US	high7.8	2.76% (86th)	—	no fix	2015-11-06	14 versions
CVE-2016-6357US	high7.5	2.42% (84th)	—	no fix	2016-10-28	2 versions
CVE-2016-1480US	high7.5	2.42% (84th)	—	no fix	2016-10-28	31 versions
CVE-2018-0447US	medium5.3	2.28% (83rd)	—	no fix	2018-10-05	—
CVE-2016-6360US	high7.5	2.16% (82nd)	—	no fix	2016-10-28	6 versions
CVE-2016-6416US	medium5.9	2.02% (81st)	—	no fix	2016-10-05	6 versions
CVE-2015-6291US	high7.8	1.93% (80th)	—	no fix	2015-11-06	16 versions
CVE-2019-1947US	high8.6	1.92% (80th)	—	no fix	2020-09-23	= 11.1.0-131
CVE-2019-1983US	medium5.3	1.86% (79th)	—	no fix	2020-09-23	2 versions
CVE-2016-6358US	high7.5	1.75% (78th)	—	no fix	2016-10-28	6 versions
CVE-2019-1844US	medium5.3	1.70% (77th)	—	no fix	2019-05-03	= 11.1.0-131
CVE-2019-1831US	medium5.3	1.65% (76th)	—	no fix	2019-04-18	2 versions
CVE-2016-6372US	high7.5	1.63% (76th)	—	no fix	2016-10-28	35 versions
CVE-2020-3181US	medium6.5	1.56% (75th)	—	13.0.0	2020-03-04	< 13.0.0
CVE-2016-6465US	medium4.3	1.56% (75th)	—	no fix	2016-12-14	4 versions
CVE-2016-1423US	medium6.1	1.54% (75th)	—	no fix	2016-10-28	11 versions
CVE-2022-20798US	critical9.8	1.54% (75th)	—	14.0.1-033	2022-06-15	2 versions
CVE-2017-3800US	medium5.8	1.52% (74th)	—	no fix	2017-01-26	3 versions
CVE-2020-3132US	medium5.9	1.51% (74th)	—	12.5.1-037	2020-02-19	2 versions
CVE-2019-1921US	high7.5	1.41% (73rd)	—	no fix	2019-07-06	= 12.0.0-419
CVE-2019-1905US	medium5.8	1.39% (72nd)	—	no fix	2019-06-20	2 versions
CVE-2020-3133US	high7.5	1.38% (72nd)	—	13.0	2020-09-23	< 13.0
CVE-2017-6783US	medium4.3	1.34% (71st)	—	no fix	2017-08-17	= 9.7.2-065
CVE-2020-3370US	medium5.8	1.28% (70th)	—	13.5.1	2020-07-16	2 versions
CVE-2020-3164US	medium5.3	1.28% (70th)	—	no fix	2020-03-04	≤ 13.0.0-392
CVE-2016-9202US	medium6.1	1.28% (70th)	—	no fix	2016-12-14	16 versions
CVE-2017-6661US	medium6.1	1.24% (69th)	—	no fix	2017-06-13	2 versions
CVE-2019-1933US	high7.4	1.24% (69th)	—	no fix	2019-07-06	= 11.1.2-023
CVE-2021-1129US	medium5.3	1.16% (67th)	—	no fix	2021-01-20	= 13.0.0
CVE-2016-1411US	medium5.9	1.12% (66th)	—	no fix	2016-12-14	7 versions
CVE-2020-3134US	medium6.5	1.09% (65th)	—	13.0	2020-01-26	< 13.0
CVE-2022-20664US	high7.7	1.03% (64th)	—	14.0.2-020	2022-06-15	< 14.0.2-020
CVE-2021-1516US	medium6.5	1.00% (63rd)	—	no fix	2021-05-06	—
CVE-2022-20960US	high7.5	0.85% (58th)	—	14.2.1-015	2022-11-04	2 versions
CVE-2020-3548US	high7.5	0.84% (58th)	—	no fix	2024-11-18	≤ 13.5.1-277
CVE-2020-3137US	medium6.1	0.84% (57th)	—	no fix	2020-09-23	≤ 13.0.0
CVE-2020-3447US	medium6.5	0.74% (54th)	—	13.5.1	2020-08-17	< 13.5.1
CVE-2021-1566US	high7.4	0.67% (51st)	—	no fix	2021-06-16	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation22 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-388CWE-3882 CVEs
CWE-19CWE-191 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE45 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan