VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 28, 2023· Updated Jun 17, 2026

CVE-2023-20119

CVE-2023-20119

Description

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Cisco Systems, Inc./Secure Email And Web Manager7 versions
    cpe:2.3:a:cisco:secure_email_and_web_manager:14.0.0-418:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:cisco:secure_email_and_web_manager:14.0.0-418:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_and_web_manager:14.0.1-033:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_and_web_manager:14.0.1-053:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_and_web_manager:15.0.0-050:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_and_web_manager:15.0.0-256:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 11.0.0-115
  • Cisco Systems, Inc./Secure Email Gateway5 versions
    cpe:2.3:a:cisco:secure_email_gateway:14.0.0-418:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cisco:secure_email_gateway:14.0.0-418:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_gateway:14.0.1-033:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_gateway:14.0.1-053:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_gateway:15.0.0-050:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_email_gateway:15.0.0-256:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Web Security Appliance5 versions
    cpe:2.3:a:cisco:web_security_appliance:14.0.0-418:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cisco:web_security_appliance:14.0.0-418:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:14.0.1-033:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:14.0.1-053:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:15.0.0-050:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:15.0.0-256:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.