Vulnslist

find the latest Cisco vulnerabilities

Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities

cisco-sa-esa-sma-wsa-xss-cP9DuEmq · Medium · Published · Updated

Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email Security Appliance (ESA); and Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-cP9DuEmq Attention: Simplifying the Cisco portfolio includes the renaming of security products under one brand: Cisco Secure. For more information, see Meet Cisco Secure.

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2023-20028, CVE-2023-20119, CVE-2023-20120
Cisco Bug IDsCSCwe14247, CSCwe18586, CSCwe14250, CSCwd50087, CSCwd50094, CSCwe12624
CVSS ScoreBase 5.4
Base 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X
Base 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X
Base 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Secure Web Appliance, Cisco Secure Email, Cisco Secure Email and Web Manager

Related Products

Product CVE Evidence
Cisco Web Security Appliance (WSA) CVE-2023-20120 Cisco OpenVuln
Cisco Web Security Appliance (WSA) CVE-2023-20119 Cisco OpenVuln
Cisco Web Security Appliance (WSA) CVE-2023-20028 Cisco OpenVuln
Cisco Secure Web Appliance CVE-2023-20120 Cisco OpenVuln
Cisco Secure Web Appliance CVE-2023-20119 Cisco OpenVuln
Cisco Secure Web Appliance CVE-2023-20028 Cisco OpenVuln
Cisco Secure Email and Web Manager CVE-2023-20120 Cisco OpenVuln
Cisco Secure Email and Web Manager CVE-2023-20119 Cisco OpenVuln
Cisco Secure Email and Web Manager CVE-2023-20028 Cisco OpenVuln
Cisco Secure Email CVE-2023-20120 Cisco OpenVuln
Cisco Secure Email CVE-2023-20119 Cisco OpenVuln
Cisco Secure Email CVE-2023-20028 Cisco OpenVuln
Cisco Email Security Appliance (ESA) CVE-2023-20120 Cisco OpenVuln
Cisco Email Security Appliance (ESA) CVE-2023-20119 Cisco OpenVuln
Cisco Email Security Appliance (ESA) CVE-2023-20028 Cisco OpenVuln