https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-20310.htmlhttps://patchthecve.com/cve/CVE-2025-20310.htmlWed, 17 Jun 2026 08:41:25 +0000MEDIUM 6.1: A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied inputhttps://patchthecve.com/cve/CVE-2025-20139.htmlhttps://patchthecve.com/cve/CVE-2025-20139.htmlWed, 17 Jun 2026 08:40:45 +0000HIGH 7.5: A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input to chat entry points. An attacker could exploithttps://patchthecve.com/cve/CVE-2022-20633.htmlhttps://patchthecve.com/cve/CVE-2022-20633.htmlWed, 17 Jun 2026 04:24:43 +0000MEDIUM 5.3: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a username enumeration attack against an affected device. This vulnerability is due to differences in authentication responses that are sent back from the applicationhttps://patchthecve.com/cve/CVE-2022-20632.htmlhttps://patchthecve.com/cve/CVE-2022-20632.htmlWed, 17 Jun 2026 04:24:43 +0000MEDIUM 6.1: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate userhttps://patchthecve.com/cve/CVE-2022-20634.htmlhttps://patchthecve.com/cve/CVE-2022-20634.htmlWed, 17 Jun 2026 04:24:43 +0000MEDIUM 4.7: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected system. Anhttps://patchthecve.com/cve/CVE-2022-20631.htmlhttps://patchthecve.com/cve/CVE-2022-20631.htmlWed, 17 Jun 2026 04:24:43 +0000MEDIUM 6.1: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate userhttps://patchthecve.com/cve/CVE-2024-20484.htmlhttps://patchthecve.com/cve/CVE-2024-20484.htmlWed, 17 Jun 2026 07:07:21 +0000HIGH 7.5: A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of Media Routinhttps://patchthecve.com/cve/CVE-2024-20367.htmlhttps://patchthecve.com/cve/CVE-2024-20367.htmlWed, 17 Jun 2026 07:06:50 +0000MEDIUM 5.4: A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An atta