enterprise chat and email vulnerabilities and fixes

Recent CVEs affecting enterprise chat and email, with upgrade or downgrade steps. 7 tracked.

Also searched as: enterprisechatandemail.

enterprise chat and email has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-07-02. Highest priority: CVE-2025-20139 (score 44/100).

CVE-2025-20310 MEDIUM 6.1 MITIGATE A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote
CVE-2025-20139 HIGH 7.5 MITIGATE A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthentic
CVE-2024-20484 HIGH 7.5 MITIGATE A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (EC
CVE-2022-20634 MEDIUM 4.7 MITIGATE A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote
CVE-2022-20633 MEDIUM 5.3 MITIGATE A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote
CVE-2022-20632 MEDIUM 6.1 MITIGATE A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote
CVE-2022-20631 MEDIUM 6.1 MITIGATE A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote

FAQ

How do I fix enterprise chat and email vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enterprise chat and email being exploited right now?

None of the tracked enterprise chat and email CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enterprise chat and email CVE should I patch first?

CVE-2025-20139 currently ranks highest (44/100): A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthentic.

RSS feed for enterprise chat and email · ← Back to latest CVEs