CVE-2022-20868

🗓️ 03 Nov 2022 19:29:31Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 94 Views

Vulnerability in Cisco Email Security Appliance & Cisco Secure Email allowing authenticated remote attackers to elevate privileges

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-20868	7 Nov 202213:16	–	circl
Tenable Nessus	Cisco Email Security Appliance Multiple Vulnerabilities (cisco-sa-esasmawsa-vulns-YRuSW5mD)	3 Nov 202200:00	–	nessus
Tenable Nessus	Cisco Secure Email and Web Manager Multiple Vulnerabilities (cisco-sa-esasmawsa-vulns-YRuSW5mD)	3 Nov 202200:00	–	nessus
Tenable Nessus	Cisco Secure Web Appliance Privilege Escalation (cisco-sa-esasmawsa-vulns-YRuSW5mD)	3 Nov 202200:00	–	nessus
Cisco	Cisco Email Security Appliance, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Next Generation Management Vulnerabilities	2 Nov 202216:00	–	cisco
CNNVD	多款Cisco产品信任管理问题漏洞	2 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-20868	3 Nov 202219:29	–	cvelist
EUVD	EUVD-2022-26118	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco ESA, SWA and Secure Email and Web Manager	3 Nov 202200:00	–	ncsc
NVD	CVE-2022-20868	4 Nov 202218:15	–	nvd

NVD

Node

cisco asyncosRange13.0–14.2.1

AND

cisco secure_email_gatewayMatch-

Node

cisco asyncosRange12.0–14.2.0

AND

cisco secure_email_and_web_managerMatch-

Node

cisco asyncosRange11.8–12.5.5

cisco asyncosRange14.0–14.0.4

cisco asyncosMatch14.5

AND

cisco secure_web_applianceMatch-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Web Appliance",
    "versions": [
      {
        "version": "11.8.0-414",
        "status": "affected"
      },
      {
        "version": "11.8.1-023",
        "status": "affected"
      },
      {
        "version": "11.8.3-018",
        "status": "affected"
      },
      {
        "version": "11.8.3-021",
        "status": "affected"
      },
      {
        "version": "12.0.1-268",
        "status": "affected"
      },
      {
        "version": "12.0.3-007",
        "status": "affected"
      },
      {
        "version": "12.5.2-007",
        "status": "affected"
      },
      {
        "version": "12.5.1-011",
        "status": "affected"
      },
      {
        "version": "12.5.4-005",
        "status": "affected"
      },
      {
        "version": "14.5.0-498",
        "status": "affected"
      },
      {
        "version": "14.0.2-012",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Email",
    "versions": [
      {
        "version": "13.0.0-392",
        "status": "affected"
      },
      {
        "version": "13.5.1-277",
        "status": "affected"
      },
      {
        "version": "14.0.0-698",
        "status": "affected"
      },
      {
        "version": "14.2.0-620",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Email and Web Manager",
    "versions": [
      {
        "version": "12.0.0-452",
        "status": "affected"
      },
      {
        "version": "12.0.1-011",
        "status": "affected"
      },
      {
        "version": "12.5.0-636",
        "status": "affected"
      },
      {
        "version": "12.5.0-658",
        "status": "affected"
      },
      {
        "version": "12.5.0-678",
        "status": "affected"
      },
      {
        "version": "12.5.0-670",
        "status": "affected"
      },
      {
        "version": "13.0.0-277",
        "status": "affected"
      },
      {
        "version": "13.6.2-078",
        "status": "affected"
      },
      {
        "version": "13.8.1-068",
        "status": "affected"
      },
      {
        "version": "13.8.1-074",
        "status": "affected"
      },
      {
        "version": "12.8.1-002",
        "status": "affected"
      },
      {
        "version": "14.0.0-404",
        "status": "affected"
      },
      {
        "version": "14.1.0-223",
        "status": "affected"
      },
      {
        "version": "14.1.0-227",
        "status": "affected"
      }
    ]
  }
]