A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCisco Secure Email And Web Manager
APPCisco14.0.0-41814.0.1-03314.0.1-05315.0.0-05015.0.0-256Cisco Secure Email Gateway
APPCisco14.0.0-41814.0.1-03314.0.1-05315.0.0-05015.0.0-256Cisco Web Security Appliance
APPCisco14.0.0-41814.0.1-03314.0.1-05315.0.0-05015.0.0-256
Powiązane podatności
Cisco Secure Email Gateway — nadpisywanie dowolnych plików przez załącznik e-mail
RCE w Hyland Perceptive Filters — błąd segmentacji przy przetwarzaniu dokumentów
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerabilit...
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly k...
A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security...