Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities

🗓️ 21 Jun 2023 16:00:00Reported by CiscoType

Cisco Secure Email & Web Manager XSS vulnerabilities patched

Reporter	Title	Published	Views	Family All 37
ATTACKERKB	CVE-2023-20119	21 Jun 202316:00	–	attackerkb
ATTACKERKB	CVE-2023-20028	21 Jun 202316:00	–	attackerkb
ATTACKERKB	CVE-2023-20120	21 Jun 202316:00	–	attackerkb
BDU FSTEC	The vulnerability in the web interface of the Cisco Operating System, Cisco AsyncOS, affects the Cisco Email Security Appliance (ESA) and the Cisco Secure Web Appliance (previously Cisco Web Security Appliance). This vulnerability allows attackers to carry out attacks using XSS scripts across different websites.	28 Jun 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco AsyncOS operating system of the Cisco Secure Email and Web Manager devices allows attackers to carry out attacks using cross-site scripting (XSS).	28 Jun 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco AsyncOS operating system allows attackers to execute attacks using cross-site scripting (XSS) techniques against devices that run Cisco Secure Email and Web Manager, Cisco Secure Email Gateway (formerly Cisco Email Security Appliance), and Cisco Secure Web Appliance (formerly Cisco Web Security Appliance).	28 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-20028	28 Jun 202318:13	–	circl
Circl	CVE-2023-20120	28 Jun 202318:13	–	circl
Tenable Nessus	Cisco Secure Email and Web Manager XSS (cisco-sa-esa-sma-wsa-xss-cP9DuEmq)	6 Jul 202300:00	–	nessus
Tenable Nessus	Cisco Secure Web Appliance XSS (cisco-sa-esa-sma-wsa-xss-cP9DuEmq)	6 Jul 202300:00	–	nessus