CVE-2024-20383

🗓️ 15 May 2024 17:59:49Reported by ciscoType

Vulnerability in Cisco Crosswork NSO and ConfD CLI allows local attacker to elevate privilege

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-20383	8 Aug 202512:53	–	circl
Cisco	Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Cross-Site Scripting Vulnerabilities	15 May 202416:00	–	cisco
Tenable Nessus	Cisco Secure Email and Web Manager Multiple Vulnerabilities (cisco-sa-esa-sma-wsa-xss-bgG5WHOD)	24 May 202400:00	–	nessus
CNNVD	Cisco Secure Email and Web Manager 安全漏洞	15 May 202400:00	–	cnnvd
Cvelist	CVE-2024-20383 Cisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability	15 May 202417:59	–	cvelist
EUVD	EUVD-2024-18098	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20383	15 May 202418:15	–	nvd
OSV	CVE-2024-20383	15 May 202418:15	–	osv
Positive Technologies	PT-2024-18655 · Cisco · Cisco Crosswork Nso Cli	15 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-20383	23 May 202508:46	–	redhatcve

NVD

Node

cisco asyncosRange<15.5.1-024

AND

cisco secure_email_and_web_manager_virtual_appliance_m100vMatch-

cisco secure_email_and_web_manager_virtual_appliance_m300vMatch-

cisco secure_email_and_web_manager_virtual_appliance_m600vMatch-

cisco secure_email_and_web_manager_m170Match-

cisco secure_email_and_web_manager_m190Match-

cisco secure_email_and_web_manager_m195Match-

cisco secure_email_and_web_manager_m380Match-

cisco secure_email_and_web_manager_m390Match-

cisco secure_email_and_web_manager_m390xMatch-

cisco secure_email_and_web_manager_m395Match-

cisco secure_email_and_web_manager_m680Match-

cisco secure_email_and_web_manager_m690Match-

cisco secure_email_and_web_manager_m690xMatch-

cisco secure_email_and_web_manager_m695Match-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Email and Web Manager",
    "versions": [
      {
        "version": "13.6.2-078",
        "status": "affected"
      },
      {
        "version": "13.0.0-277",
        "status": "affected"
      },
      {
        "version": "13.8.1-068",
        "status": "affected"
      },
      {
        "version": "13.8.1-074",
        "status": "affected"
      },
      {
        "version": "14.0.0-404",
        "status": "affected"
      },
      {
        "version": "12.8.1-002",
        "status": "affected"
      },
      {
        "version": "14.1.0-227",
        "status": "affected"
      },
      {
        "version": "14.2.0-212",
        "status": "affected"
      },
      {
        "version": "12.8.1-021",
        "status": "affected"
      },
      {
        "version": "13.8.1-108",
        "status": "affected"
      },
      {
        "version": "14.2.0-224",
        "status": "affected"
      },
      {
        "version": "14.3.0-120",
        "status": "affected"
      },
      {
        "version": "15.0.0-334",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD

08 Aug 2025 13:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.14.8 - 8.4

EPSS0.00095

SSVC

CWE-79