Enterprise chat and email

This hub aggregates every CVE we track for Enterprise chat and email, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Enterprise chat and email.

• CVE-2025-20310Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability6.1Jul 2, 2025
• CVE-2025-20139A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerabili...7.5Apr 2, 2025
• CVE-2022-20633Cisco Enterprise Chat and Email Username Enumeration Vulnerability5.3Nov 15, 2024
• CVE-2022-20632Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability6.1Nov 15, 2024
• CVE-2022-20631Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability6.1Nov 15, 2024
• CVE-2022-20634Cisco Enterprise Chat and Email Open Redirect Vulnerability4.7Nov 15, 2024
• CVE-2024-20484Cisco Enterprise Chat and Email Denial of Service Vulnerability7.5Nov 6, 2024
• CVE-2024-20367A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. ...5.4Apr 3, 2024
• CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.KEV7.5Oct 10, 2023
• CVE-2022-20802Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability5.4May 27, 2022
• CVE-2021-44228Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsKEV10.0Dec 10, 2021
• CVE-2019-1877Cisco Enterprise Chat and Email Attachment Download Vulnerability6.5Nov 5, 2019
• CVE-2019-1870Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability6.1Jun 5, 2019
• CVE-2019-1702Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerabilities6.1Mar 11, 2019
• CVE-2016-1000031Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution9.8Oct 25, 2016