CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20504

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 17.7%

CVSS Severity

CVSS v3 Score 5.4

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-xss-zYm3f49n

Products affected by CVE-2024-20504

Cisco » Secure Email And Web Manager Virtual Appliance M100v » Version: N/A

cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m100v:-
Cisco » Secure Email And Web Manager Virtual Appliance M300v » Version: N/A

cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m300v:-
Cisco » Secure Email And Web Manager Virtual Appliance M600v » Version: N/A

cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m600v:-
Cisco » Secure Email Gateway Virtual Appliance C100v » Version: N/A

cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c100v:-
Cisco » Secure Email Gateway Virtual Appliance C300v » Version: N/A

cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c300v:-
Cisco » Secure Email Gateway Virtual Appliance C600v » Version: N/A

cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c600v:-
Cisco » Secure Web Appliance Virtual S1000v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s1000v:-
Cisco » Secure Web Appliance Virtual S100v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s100v:-
Cisco » Secure Web Appliance Virtual S300v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s300v:-
Cisco » Secure Web Appliance Virtual S600v » Version: N/A

cpe:2.3:a:cisco:secure_web_appliance_virtual_s600v:-
Cisco » Secure Email And Web Manager M170 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m170:-
Cisco » Secure Email And Web Manager M190 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m190:-
Cisco » Secure Email And Web Manager M195 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m195:-
Cisco » Secure Email And Web Manager M380 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m380:-
Cisco » Secure Email And Web Manager M390 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m390:-
Cisco » Secure Email And Web Manager M390x » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m390x:-
Cisco » Secure Email And Web Manager M395 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m395:-
Cisco » Secure Email And Web Manager M680 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m680:-
Cisco » Secure Email And Web Manager M690 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m690:-
Cisco » Secure Email And Web Manager M690x » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m690x:-
Cisco » Secure Email And Web Manager M695 » Version: N/A

cpe:2.3:h:cisco:secure_email_and_web_manager_m695:-
Cisco » Secure Email Gateway C195 » Version: N/A

cpe:2.3:h:cisco:secure_email_gateway_c195:-
Cisco » Secure Email Gateway C395 » Version: N/A

cpe:2.3:h:cisco:secure_email_gateway_c395:-
Cisco » Secure Email Gateway C695 » Version: N/A

cpe:2.3:h:cisco:secure_email_gateway_c695:-
Cisco » Secure Web Appliance S196 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s196:-
Cisco » Secure Web Appliance S396 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s396:-
Cisco » Secure Web Appliance S696 » Version: N/A

cpe:2.3:h:cisco:secure_web_appliance_s696:-
Cisco » Asyncos » Version: 14.0.0-404

cpe:2.3:o:cisco:asyncos:14.0.0-404
Cisco » Asyncos » Version: 14.0.0-698

cpe:2.3:o:cisco:asyncos:14.0.0-698
Cisco » Asyncos » Version: 14.0.2-012

cpe:2.3:o:cisco:asyncos:14.0.2-012
Cisco » Asyncos » Version: 14.0.3-014

cpe:2.3:o:cisco:asyncos:14.0.3-014
Cisco » Asyncos » Version: 14.0.4-005

cpe:2.3:o:cisco:asyncos:14.0.4-005
Cisco » Asyncos » Version: 14.0.5-007

cpe:2.3:o:cisco:asyncos:14.0.5-007
Cisco » Asyncos » Version: 14.1.0-032

cpe:2.3:o:cisco:asyncos:14.1.0-032
Cisco » Asyncos » Version: 14.1.0-041

cpe:2.3:o:cisco:asyncos:14.1.0-041
Cisco » Asyncos » Version: 14.1.0-047

cpe:2.3:o:cisco:asyncos:14.1.0-047
Cisco » Asyncos » Version: 14.1.0-223

cpe:2.3:o:cisco:asyncos:14.1.0-223
Cisco » Asyncos » Version: 14.1.0-227

cpe:2.3:o:cisco:asyncos:14.1.0-227
Cisco » Asyncos » Version: 14.2.0-212

cpe:2.3:o:cisco:asyncos:14.2.0-212
Cisco » Asyncos » Version: 14.2.0-224

cpe:2.3:o:cisco:asyncos:14.2.0-224
Cisco » Asyncos » Version: 14.2.0-620

cpe:2.3:o:cisco:asyncos:14.2.0-620
Cisco » Asyncos » Version: 14.2.1-020

cpe:2.3:o:cisco:asyncos:14.2.1-020
Cisco » Asyncos » Version: 14.3.0-032

cpe:2.3:o:cisco:asyncos:14.3.0-032
Cisco » Asyncos » Version: 14.3.0-120

cpe:2.3:o:cisco:asyncos:14.3.0-120
Cisco » Asyncos » Version: 14.5.0-498

cpe:2.3:o:cisco:asyncos:14.5.0-498
Cisco » Asyncos » Version: 14.5.1-008

cpe:2.3:o:cisco:asyncos:14.5.1-008
Cisco » Asyncos » Version: 14.5.1-016

cpe:2.3:o:cisco:asyncos:14.5.1-016
Cisco » Asyncos » Version: 14.5.1-510

cpe:2.3:o:cisco:asyncos:14.5.1-510
Cisco » Asyncos » Version: 14.5.1-607

cpe:2.3:o:cisco:asyncos:14.5.1-607
Cisco » Asyncos » Version: 14.5.2-011

cpe:2.3:o:cisco:asyncos:14.5.2-011
Cisco » Asyncos » Version: 14.5.3-033

cpe:2.3:o:cisco:asyncos:14.5.3-033
Cisco » Asyncos » Version: 15.0.0-104

cpe:2.3:o:cisco:asyncos:15.0.0-104
Cisco » Asyncos » Version: 15.0.0-322

cpe:2.3:o:cisco:asyncos:15.0.0-322
Cisco » Asyncos » Version: 15.0.0-334

cpe:2.3:o:cisco:asyncos:15.0.0-334
Cisco » Asyncos » Version: 15.0.0-355

cpe:2.3:o:cisco:asyncos:15.0.0-355
Cisco » Asyncos » Version: 15.0.1-030

cpe:2.3:o:cisco:asyncos:15.0.1-030
Cisco » Asyncos » Version: 15.1.0-287

cpe:2.3:o:cisco:asyncos:15.1.0-287
Cisco » Asyncos » Version: 15.2.0-116

cpe:2.3:o:cisco:asyncos:15.2.0-116
Cisco » Asyncos » Version: 15.2.0-164

cpe:2.3:o:cisco:asyncos:15.2.0-164
Cisco » Asyncos » Version: 15.5.0-048

cpe:2.3:o:cisco:asyncos:15.5.0-048
Cisco » Asyncos » Version: 15.5.1-024

cpe:2.3:o:cisco:asyncos:15.5.1-024
Cisco » Asyncos » Version: 15.5.1-029

cpe:2.3:o:cisco:asyncos:15.5.1-029
Cisco » Asyncos » Version: 15.5.1-055

cpe:2.3:o:cisco:asyncos:15.5.1-055

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20504

Products

Pricing

Contact Us