6.1
Moyenne
CVE-2024-20392 A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow…
Description
A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vulnerability is due to insufficient input validation of some parameters that are passed to the web-based management API of the affected system. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to perform cross-site scripting (XSS) attacks, resulting in the execution of arbitrary script code in the browser of the targeted user, or could allow the attacker to access sensitive, browser-based information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Email | 15.5.0-048 | Pas de correctif indiqué |
| Cisco Secure Email 15.0 | 15.0.0-104 → 15.0.1-030 | Pas de correctif indiqué |
| Cisco Secure Email | 14.3.0-032 | Pas de correctif indiqué |
| Cisco Secure Email 14.2 | 14.2.0-620 → 14.2.1-020 | Pas de correctif indiqué |
| Cisco Secure Email | 14.0.0-698 | Pas de correctif indiqué |
| Cisco Secure Email 13.5 | 13.5.1-277 → 13.5.4-038 | Pas de correctif indiqué |
| Cisco Secure Email 13.0 | 13.0.0-392 → 13.0.5-007 | Pas de correctif indiqué |
| Cisco Secure Email 12.5 | 12.5.0-066 → 12.5.4-041 | Pas de correctif indiqué |
| Cisco Secure Email 12.1 | 12.1.0-071 → 12.1.0-089 | Pas de correctif indiqué |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Email | 12.0.0-419 | Pas de correctif indiqué |
| Cisco Secure Email 11.1 | 11.1.0-069 → 11.1.0-128 | Pas de correctif indiqué |
| Cisco Secure Email | 11.0.3-238 | Pas de correctif indiqué |
Références
- cisco-sa-esa-http-split-GLrnnOwS sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Secure Email
Les 29 CVE de Cisco Secure Email →
CVE-2026-76519
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
9.8
Critique
CVE-2026-76442
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
7.5
Élevée
CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
9.8
Critique
CVE-2026-76443
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
9.8
Critique