Lucene search
+L

CVE-2024-20392

🗓️ 15 May 2024 17:22:39Reported by ciscoType 
cve
 cve
🔗 web.nvd.nist.gov👁 91 Views

A vulnerability in Cisco Secure Email Gateway could allow remote attackers to conduct HTTP response splitting attack due to insufficient input validation in the web-based management API

Related
Detection
Affected
Refs
NVD
Node
AND
OR
ciscoasyncosMatch11.0.3-238
ciscoasyncosMatch11.1.0-069
ciscoasyncosMatch11.1.0-128
ciscoasyncosMatch12.0.0-419
ciscoasyncosMatch12.1.0-071
ciscoasyncosMatch12.1.0-087
ciscoasyncosMatch12.1.0-089
ciscoasyncosMatch12.5.0-066
ciscoasyncosMatch12.5.3-041
ciscoasyncosMatch12.5.4-041
ciscoasyncosMatch13.0.0-392
ciscoasyncosMatch13.0.5-007
ciscoasyncosMatch13.5.1-277
ciscoasyncosMatch13.5.4-038
ciscoasyncosMatch14.0.0-698
ciscoasyncosMatch14.2.0-620
ciscoasyncosMatch14.2.1-020
ciscoasyncosMatch14.3.0-032
ciscoasyncosMatch15.0.0-104
ciscoasyncosMatch15.0.1-030
ciscoasyncosMatch15.5.0-048
[
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Email",
    "versions": [
      {
        "version": "11.0.3-238",
        "status": "affected"
      },
      {
        "version": "11.1.0-069",
        "status": "affected"
      },
      {
        "version": "11.1.0-128",
        "status": "affected"
      },
      {
        "version": "12.0.0-419",
        "status": "affected"
      },
      {
        "version": "12.1.0-071",
        "status": "affected"
      },
      {
        "version": "12.1.0-087",
        "status": "affected"
      },
      {
        "version": "12.1.0-089",
        "status": "affected"
      },
      {
        "version": "13.0.0-392",
        "status": "affected"
      },
      {
        "version": "13.0.5-007",
        "status": "affected"
      },
      {
        "version": "13.5.1-277",
        "status": "affected"
      },
      {
        "version": "13.5.4-038",
        "status": "affected"
      },
      {
        "version": "12.5.0-066",
        "status": "affected"
      },
      {
        "version": "12.5.4-041",
        "status": "affected"
      },
      {
        "version": "12.5.3-041",
        "status": "affected"
      },
      {
        "version": "14.0.0-698",
        "status": "affected"
      },
      {
        "version": "14.2.0-620",
        "status": "affected"
      },
      {
        "version": "14.2.1-020",
        "status": "affected"
      },
      {
        "version": "14.3.0-032",
        "status": "affected"
      },
      {
        "version": "15.0.0-104",
        "status": "affected"
      },
      {
        "version": "15.0.1-030",
        "status": "affected"
      },
      {
        "version": "15.5.0-048",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation