CVE-2022-20664 Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability

🗓️ 15 Jun 2022 17:55:10Reported by ciscoType

Cisco Email Security Appliance and Web Manager Information Disclosure Vulnerability

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-20664	15 Jun 202223:00	–	attackerkb
BDU FSTEC	The vulnerability of the implementation of the Lightweight Directory Access Protocol (LDAP) in the Cisco Secure Email and Web Manager content protection device, as well as the Cisco Email Security Appliance (ESA) email security system, allows a perpetrator to gain unauthorized access to protected information.	4 Jul 202200:00	–	bdu_fstec
Cisco	Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability	15 Jun 202216:00	–	cisco
Tenable Nessus	Cisco Email Security Appliance Information Disclosure (cisco-sa-esasma-info-dsc-Q9tLuOvM)	17 Jun 202200:00	–	nessus
Tenable Nessus	Cisco Secure Email and Web Manager (SMA) Information Disclosure (cisco-sa-esasma-info-dsc-Q9tLuOvM)	17 Jun 202200:00	–	nessus
CNNVD	Cisco多款产品信息泄露漏洞	15 Jun 202200:00	–	cnnvd
CNVD	Information Disclosure Vulnerability in Multiple Cisco Products (CNVD-2022-55669)	17 Jun 202200:00	–	cnvd
CVE	CVE-2022-20664	15 Jun 202217:55	–	cve
EUVD	EUVD-2022-25914	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Email Security Appliance, Secure Email and Web Manager	16 Jun 202200:00	–	ncsc

[
  {
    "product": "Cisco Email Security Appliance (ESA)",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esasma-info-dsc-Q9tLuOvM

15 Jun 2022 17:55Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.7

EPSS0.00374

CWE-497