Medium severity5.8NVD Advisory· Published Apr 6, 2022· Updated Jun 17, 2026

CVE-2022-20784

Description

A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to incorrect handling of certain character combinations inserted into a URL. An attacker could exploit this vulnerability by sending crafted URLs to be processed by an affected device. A successful exploit could allow the attacker to bypass the web proxy and access web content that has been blocked by policy.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Web Security Appliance2 versions
cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*range: >=11.7.0,<14.0.2
- (no CPE)
Cisco Systems, Inc./AsyncOS Softwarellm-fuzzy
Cisco Systems, Inc./Web Security Appliance \(wsa\)cpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-filter-bypass-XXXTU3XnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.377
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000