CVE-2022-20772

🗓️ 03 Nov 2022 19:32:24Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 65 Views

A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduc

Reporter	Title	Published	Views	Family All 12
Cisco	Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability	2 Nov 202216:00	–	cisco
Tenable Nessus	Cisco Email Security Appliance HTTP Response Header Injection (cisco-sa-ESA-HTTP-Inject-nvsycUmR)	3 Nov 202200:00	–	nessus
Tenable Nessus	Cisco Secure Email and Web Manager (SMA) HTTP Response Header Injection (cisco-sa-ESA-HTTP-Inject-nvsycUmR)	3 Nov 202200:00	–	nessus
CNNVD	多款Cisco产品注入漏洞	2 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-20772	3 Nov 202219:32	–	cvelist
EUVD	EUVD-2022-26022	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco ESA, SWA and Secure Email and Web Manager	3 Nov 202200:00	–	ncsc
NVD	CVE-2022-20772	4 Nov 202218:15	–	nvd
Prion	Design/Logic Flaw	4 Nov 202218:15	–	prion
Positive Technologies	PT-2022-5478 · Cisco · Cisco Email Security Appliance +1	2 Nov 202200:00	–	ptsecurity

NVD

Node

cisco email_security_appliance_firmwareRange13.5.1–14.0.3-015

cisco email_security_appliance_firmwareRange14.1–14.2.1-015

cisco email_security_appliance_firmwareRange14.3–14.3.0-023

AND

cisco email_security_applianceMatch-

Node

cisco secure_email_and_web_manager_firmwareRange14.2–14.2.0-217

cisco secure_email_and_web_manager_firmwareRange14.3–14.3.0-115

AND

cisco secure_email_and_web_managerMatch-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Email",
    "versions": [
      {
        "version": "13.5.1-277",
        "status": "affected"
      },
      {
        "version": "14.0.0-698",
        "status": "affected"
      },
      {
        "version": "14.2.0-620",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Email and Web Manager",
    "versions": [
      {
        "version": "14.0.0-404",
        "status": "affected"
      },
      {
        "version": "14.1.0-223",
        "status": "affected"
      },
      {
        "version": "14.1.0-227",
        "status": "affected"
      },
      {
        "version": "14.2.0-212",
        "status": "affected"
      }
    ]
  }
]