CVE-2026-20172

A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email ECE could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Agent. This...

EUVD-2022-26052

Malicious code in bioql PyPI...

CVE-2025-20310

A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...

Cisco Enterprise Chat and Email 跨站脚本漏洞

Cisco Enterprise Chat and Email Cisco ECE is a suite of enterprise chat and email solutions from Cisco. The product provides email, chat, and web callback functionality for other Cisco solutions. A cross-site scripting vulnerability exists in Cisco Enterprise Chat and Email that stems from the we...

Cisco Enterprise Chat and Email 跨站脚本漏洞

Cisco Enterprise Chat and Email is a set of enterprise chat and email solutions from Cisco USA. Cisco Enterprise Chat and Email is a cross-site scripting vulnerability that could be exploited by attackers to execute arbitrary code in the context of the interface or access sensitive browser-based...

Cisco Enterprise Chat and Email 输入验证错误漏洞

Cisco Enterprise Chat and Email CEC is a suite of enterprise chat and email solutions from Cisco. The product provides email, chat, and web callback functionality for other Cisco solutions. Cisco Enterprise Chat and Email suffers from an input validation error vulnerability that stems from a...