CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20256

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 14.9%

CVSS Severity

CVSS v3 Score 4.8

References

Products affected by CVE-2024-20256

Cisco » Secure Email And Web Manager Virtual Appliance M100v » Version: N/A

cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m100v:-
Cisco » Secure Email And Web Manager Virtual Appliance M300v » Version: N/A

cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m300v:-
Cisco » Secure Email And Web Manager Virtual Appliance M600v » Version: N/A

cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m600v:-
Cisco » Secure Web Appliance Virtual S1000v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s1000v:-
Cisco » Secure Web Appliance Virtual S100v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s100v:-
Cisco » Secure Web Appliance Virtual S300v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s300v:-
Cisco » Secure Web Appliance Virtual S600v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s600v:-
Cisco » Secure Email And Web Manager M170 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m170:-
Cisco » Secure Email And Web Manager M190 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m190:-
Cisco » Secure Email And Web Manager M195 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m195:-
Cisco » Secure Email And Web Manager M380 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m380:-
Cisco » Secure Email And Web Manager M390 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m390:-
Cisco » Secure Email And Web Manager M390x » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m390x:-
Cisco » Secure Email And Web Manager M395 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m395:-
Cisco » Secure Email And Web Manager M680 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m680:-
Cisco » Secure Email And Web Manager M690 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m690:-
Cisco » Secure Email And Web Manager M690x » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m690x:-
Cisco » Secure Email And Web Manager M695 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m695:-
Cisco » Secure Web Appliance S196 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s196:-
Cisco » Secure Web Appliance S396 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s396:-
Cisco » Secure Web Appliance S696 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s696:-
Cisco » Asyncos » Version: 11.0.0-115

cpe:2.3:o:cisco:asyncos:11.0.0-115
Cisco » Asyncos » Version: 11.0.1-161

cpe:2.3:o:cisco:asyncos:11.0.1-161
Cisco » Asyncos » Version: 11.5.1-105

cpe:2.3:o:cisco:asyncos:11.5.1-105
Cisco » Asyncos » Version: 11.7.0-406

cpe:2.3:o:cisco:asyncos:11.7.0-406
Cisco » Asyncos » Version: 11.7.0-418

cpe:2.3:o:cisco:asyncos:11.7.0-418
Cisco » Asyncos » Version: 11.7.1-006

cpe:2.3:o:cisco:asyncos:11.7.1-006
Cisco » Asyncos » Version: 11.7.1-020

cpe:2.3:o:cisco:asyncos:11.7.1-020
Cisco » Asyncos » Version: 11.7.1-049

cpe:2.3:o:cisco:asyncos:11.7.1-049
Cisco » Asyncos » Version: 11.7.2-011

cpe:2.3:o:cisco:asyncos:11.7.2-011
Cisco » Asyncos » Version: 11.8.0-414

cpe:2.3:o:cisco:asyncos:11.8.0-414
Cisco » Asyncos » Version: 11.8.1-023

cpe:2.3:o:cisco:asyncos:11.8.1-023
Cisco » Asyncos » Version: 11.8.3-018

cpe:2.3:o:cisco:asyncos:11.8.3-018
Cisco » Asyncos » Version: 11.8.3-021

cpe:2.3:o:cisco:asyncos:11.8.3-021
Cisco » Asyncos » Version: 12.0.0-452

cpe:2.3:o:cisco:asyncos:12.0.0-452
Cisco » Asyncos » Version: 12.0.1-011

cpe:2.3:o:cisco:asyncos:12.0.1-011
Cisco » Asyncos » Version: 12.0.1-268

cpe:2.3:o:cisco:asyncos:12.0.1-268
Cisco » Asyncos » Version: 12.0.3-007

cpe:2.3:o:cisco:asyncos:12.0.3-007
Cisco » Asyncos » Version: 12.5.0-636

cpe:2.3:o:cisco:asyncos:12.5.0-636
Cisco » Asyncos » Version: 12.5.0-658

cpe:2.3:o:cisco:asyncos:12.5.0-658
Cisco » Asyncos » Version: 12.5.0-670

cpe:2.3:o:cisco:asyncos:12.5.0-670
Cisco » Asyncos » Version: 12.5.0-678

cpe:2.3:o:cisco:asyncos:12.5.0-678
Cisco » Asyncos » Version: 12.5.1-011

cpe:2.3:o:cisco:asyncos:12.5.1-011
Cisco » Asyncos » Version: 12.5.2-007

cpe:2.3:o:cisco:asyncos:12.5.2-007
Cisco » Asyncos » Version: 12.5.4-005

cpe:2.3:o:cisco:asyncos:12.5.4-005
Cisco » Asyncos » Version: 12.5.5-004

cpe:2.3:o:cisco:asyncos:12.5.5-004
Cisco » Asyncos » Version: 12.5.6-008

cpe:2.3:o:cisco:asyncos:12.5.6-008
Cisco » Asyncos » Version: 12.8.1-002

cpe:2.3:o:cisco:asyncos:12.8.1-002
Cisco » Asyncos » Version: 12.8.1-021

cpe:2.3:o:cisco:asyncos:12.8.1-021
Cisco » Asyncos » Version: 13.0.0-277

cpe:2.3:o:cisco:asyncos:13.0.0-277
Cisco » Asyncos » Version: 13.6.2-078

cpe:2.3:o:cisco:asyncos:13.6.2-078
Cisco » Asyncos » Version: 13.8.1-068

cpe:2.3:o:cisco:asyncos:13.8.1-068
Cisco » Asyncos » Version: 13.8.1-074

cpe:2.3:o:cisco:asyncos:13.8.1-074
Cisco » Asyncos » Version: 13.8.1-108

cpe:2.3:o:cisco:asyncos:13.8.1-108
Cisco » Asyncos » Version: 14.0.0-404

cpe:2.3:o:cisco:asyncos:14.0.0-404
Cisco » Asyncos » Version: 14.0.2-012

cpe:2.3:o:cisco:asyncos:14.0.2-012
Cisco » Asyncos » Version: 14.0.3-014

cpe:2.3:o:cisco:asyncos:14.0.3-014
Cisco » Asyncos » Version: 14.0.4-005

cpe:2.3:o:cisco:asyncos:14.0.4-005
Cisco » Asyncos » Version: 14.1.0-223

cpe:2.3:o:cisco:asyncos:14.1.0-223
Cisco » Asyncos » Version: 14.1.0-227

cpe:2.3:o:cisco:asyncos:14.1.0-227
Cisco » Asyncos » Version: 14.2.0-212

cpe:2.3:o:cisco:asyncos:14.2.0-212
Cisco » Asyncos » Version: 14.2.0-224

cpe:2.3:o:cisco:asyncos:14.2.0-224
Cisco » Asyncos » Version: 14.2.1-020

cpe:2.3:o:cisco:asyncos:14.2.1-020
Cisco » Asyncos » Version: 14.3.0-120

cpe:2.3:o:cisco:asyncos:14.3.0-120
Cisco » Asyncos » Version: 14.5.0-498

cpe:2.3:o:cisco:asyncos:14.5.0-498
Cisco » Asyncos » Version: 14.5.1-016

cpe:2.3:o:cisco:asyncos:14.5.1-016
Cisco » Asyncos » Version: 15.0.0-322

cpe:2.3:o:cisco:asyncos:15.0.0-322
Cisco » Asyncos » Version: 15.0.0-334

cpe:2.3:o:cisco:asyncos:15.0.0-334
Cisco » Asyncos » Version: 9.0.0-087

cpe:2.3:o:cisco:asyncos:9.0.0-087

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20256

Products

Pricing

Contact Us