5.9
Moyenne
CVE-2026-20354 Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of…
Description
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle technique to intercept and modify traffic between email gateways. A successful exploit could allow the attacker to obtain plaintext content from the encrypted communication.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Email | 16.5.0-780 | Pas de correctif indiqué |
| Cisco Secure Email 16.0 | 16.0.0-050 → 16.0.4-016 | Pas de correctif indiqué |
| Cisco Secure Email 15.5 | 15.5.0-048 → 15.5.4-012 | Pas de correctif indiqué |
| Cisco Secure Email 15.0 | 15.0.0-104 → 15.0.5-016 | Pas de correctif indiqué |
| Cisco Secure Email | 14.3.0-032 | Pas de correctif indiqué |
| Cisco Secure Email 14.2 | 14.2.0-620 → 14.2.1-020 | Pas de correctif indiqué |
| Cisco Secure Email | 14.0.0-698 | Pas de correctif indiqué |
| Cisco Secure Email 13.5 | 13.5.1-277 → 13.5.4-038 | Pas de correctif indiqué |
| Cisco Secure Email 13.0 | 13.0.0-392 → 13.0.5-007 | Pas de correctif indiqué |
Références
- cisco-sa-esa-smime-disc-dzw4rEdY sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Secure Email
Les 29 CVE de Cisco Secure Email →
CVE-2026-76519
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
9.8
Critique
CVE-2026-76442
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
7.5
Élevée
CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
9.8
Critique
CVE-2026-76443
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
9.8
Critique