VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jun 28, 2023· Updated Jun 17, 2026

CVE-2023-20028

CVE-2023-20028

Description

Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email Security Appliance (ESA); and Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Cisco Systems, Inc./Secure Email And Web Manager5 versions
    cpe:2.3:a:cisco:secure_email_and_web_manager:14.0.0-418:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cisco:secure_email_and_web_manager:14.0.0-418:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_and_web_manager:14.0.1-033:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_and_web_manager:14.0.1-053:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_and_web_manager:15.0.0-050:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_and_web_manager:15.0.0-256:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Secure Email Gateway6 versions
    cpe:2.3:a:cisco:secure_email_gateway:14.0.0-418:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cisco:secure_email_gateway:14.0.0-418:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_gateway:14.0.1-033:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_gateway:14.0.1-053:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_gateway:15.0.0-050:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_gateway:15.0.0-256:*:*:*:*:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Web Security Appliance5 versions
    cpe:2.3:a:cisco:web_security_appliance:14.0.0-418:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cisco:web_security_appliance:14.0.0-418:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:14.0.1-033:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:14.0.1-053:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:15.0.0-050:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:15.0.0-256:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Cisco Secure Web Appliancellm-fuzzy
  • Cisco Systems, Inc./AsyncOS Softwarellm-fuzzy
  • Cisco Systems, Inc./Web Security Appliance \(wsa\)cpe-rescue
    Range: n/a

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.