Aller au contenu
en Se connecter
6.1 Moyenne

CVE-2023-20119 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web…

Description

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Secure Email and Web Manager 14.3.0-120 Pas de correctif indiqué
Cisco Secure Email and Web Manager 14.2 14.2.0-212 → 14.2.1-020 Pas de correctif indiqué
Cisco Secure Email and Web Manager 14.1 14.1.0-223 → 14.1.0-227 Pas de correctif indiqué
Cisco Secure Email and Web Manager 14.0.0-404 Pas de correctif indiqué
Cisco Secure Email and Web Manager 13.8 13.8.1-068 → 13.8.1-108 Pas de correctif indiqué
Cisco Secure Email and Web Manager 13.6.2-078 Pas de correctif indiqué
Cisco Secure Email and Web Manager 13.0.0-277 Pas de correctif indiqué
Cisco Secure Email and Web Manager 12.8 12.8.1-002 → 12.8.1-021 Pas de correctif indiqué
Cisco Secure Email and Web Manager 12.5 12.5.0-636 → 12.5.0-678 Pas de correctif indiqué
Afficher les 3 autres branches
Produit Versions touchées Corrigé en
Cisco Secure Email and Web Manager 12.0 12.0.0-452 → 12.0.1-011 Pas de correctif indiqué
Cisco Secure Email and Web Manager 11.5.1-105 Pas de correctif indiqué
Cisco Secure Email and Web Manager 11.0 11.0.0-115 → 11.0.1-161 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Secure Email and Web Manager

Les 20 CVE de Cisco Secure Email and Web Manager →
CVE-2026-76442 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 7.5 Élevée CVE-2026-76443 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 9.8 Critique CVE-2026-76441 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 9.8 Critique CVE-2026-76440 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 9.8 Critique
Suivre cette CVE