PatchTheCVEemail security vulnerabilities and fixes
Recent CVEs affecting email security, with upgrade or downgrade steps. 10 tracked.
Also searched as: emailsecurity.
email security has 10 tracked vulnerabilities, 1 critical and 3 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 9. Most recent: 2024-09-04. Highest priority: CVE-2021-20021 (score 97/100).
- CVE-2021-20023 MEDIUM 4.9 EXPLOITED UPGRADE UPGRADE SonicWall Email Security Path Traversal Vulnerability
- CVE-2021-20022 HIGH 7.2 EXPLOITED UPGRADE UPGRADE SonicWall Email Security Unrestricted Upload of File Vulnerability
- CVE-2021-45105 MEDIUM 5.9 UPGRADE MITIGATE Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolle
- CVE-2021-20021 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE SonicWall Email Security Improper Privilege Management Vulnerability
- CVE-2024-2166 HIGH 8.8 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoi
- CVE-2023-2080 HIGH 8.5 MITIGATE MITIGATE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoi
- CVE-2023-0655 MEDIUM 5.3 UPGRADE SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access t
- CVE-2022-1700 HIGH 7.5 UPGRADE UPGRADE Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint
- CVE-2020-6590 HIGH 7.5 UPGRADE UPGRADE Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to infor
- CVE-2020-36519 MEDIUM 4.9 UPGRADE Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via S
FAQ
How do I fix email security vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is email security being exploited right now?
Yes: 3 email security CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.
Which email security CVE should I patch first?
CVE-2021-20021 currently ranks highest (97/100): SonicWall Email Security Improper Privilege Management Vulnerability.