Vulnerabilities fixed in Cisco Email Security Appliance, Secure Email and Web Manager

🗓️ 16 Jun 2022 00:00:00Reported by NCSCType

Vulnerabilities fixed in Cisco Email Security Appliance and Secure Email and Web Manager, addressing authentication bypass and data exposure.

Reporter	Title	Published	Views	Family All 30
ATTACKERKB	CVE-2022-20798	15 Jun 202223:00	–	attackerkb
ATTACKERKB	CVE-2022-20664	15 Jun 202223:00	–	attackerkb
BDU FSTEC	The vulnerability of the external authentication function of the Cisco Secure Email and Web Manager (formerly known as Cisco Security Management Appliance and Cisco Email Security Appliance) relates to access control errors, allowing attackers to gain full access to the device’s web interface.	17 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Lightweight Directory Access Protocol (LDAP) in the Cisco Secure Email and Web Manager content protection device, as well as the Cisco Email Security Appliance (ESA) email security system, allows a perpetrator to gain unauthorized access to protected information.	4 Jul 202200:00	–	bdu_fstec
Circl	CVE-2022-20798	16 Jun 202209:37	–	circl
Tenable Nessus	Cisco Email Security Appliance External Authentication Bypass (cisco-sa-sma-esa-auth-bypass-66kEcxQD)	27 Jul 202200:00	–	nessus
Tenable Nessus	Cisco Email Security Appliance Information Disclosure (cisco-sa-esasma-info-dsc-Q9tLuOvM)	17 Jun 202200:00	–	nessus
Tenable Nessus	Cisco Secure Email and Web Manager (SMA) Information Disclosure (cisco-sa-esasma-info-dsc-Q9tLuOvM)	17 Jun 202200:00	–	nessus
Tenable Nessus	Cisco Secure Email and Web Manager External Authentication Bypass (cisco-sa-sma-esa-auth-bypass-66kEcxQD)	27 Jul 202200:00	–	nessus
Cisco	Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability	15 Jun 202216:00	–	cisco