Skip to content
fr Sign in
4.7 Medium

CVE-2022-20772 A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an…

Description

A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this vulnerability by injecting malicious HTTP headers, controlling the response body, or splitting the response into multiple responses.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Email 14.2.0-620 No fix stated
Cisco Secure Email 14.0.0-698 No fix stated
Cisco Secure Email 13.5.1-277 No fix stated
Cisco Secure Email and Web Manager 14.2.0-212 No fix stated
Cisco Secure Email and Web Manager 14.1 14.1.0-223 → 14.1.0-227 No fix stated
Cisco Secure Email and Web Manager 14.0.0-404 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Secure Email

The 29 CVEs of Cisco Secure Email →
CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability 9.8 Critical CVE-2026-76442 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 7.5 High CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability 9.8 Critical CVE-2026-76443 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 9.8 Critical
Track this CVE