CVE-2022-20772
published 2022-11-04CVE-2022-20772: A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an…
PriorityP430medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
EPSS
0.58%
46.5th percentile
A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack.
This vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this vulnerability by injecting malicious HTTP headers, controlling the response body, or splitting the response into multiple responses.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_secure_email | — | — |
| cisco | cisco_secure_email | — | — |
| cisco | cisco_secure_email | — | — |
| cisco | cisco_secure_email_and_web_manager | — | — |
| cisco | cisco_secure_email_and_web_manager | — | — |
| cisco | cisco_secure_email_and_web_manager | — | — |
| cisco | cisco_secure_email_and_web_manager | — | — |
| cisco | email_security_appliance_and_cisco_secure_email_and_web_manager_http | — | — |
| cisco | email_security_appliance_firmware | >= 13.5.1 < 14.0.3-015 | 14.0.3-015 |
| cisco | email_security_appliance_firmware | >= 14.1 < 14.2.1-015 | 14.2.1-015 |
| cisco | email_security_appliance_firmware | >= 14.3 < 14.3.0-023 | 14.3.0-023 |
| cisco | secure_email_and_web_manager_firmware | >= 14.2 < 14.2.0-217 | 14.2.0-217 |
| cisco | secure_email_and_web_manager_firmware | >= 14.3 < 14.3.0-115 | 14.3.0-115 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
vendor_cisco4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability
vendor_cisco·2022-11-02·CVSS 4.7
CVE-2022-20772 [MEDIUM] CWE-113 Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability
Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability
A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack.
This vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this vulnerability by injecting malicious HTTP headers, controlling the response body, or splitting the response into multiple responses.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security
Cisco
Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability
vendor_cisco·CVSS 3.1
CVE-2022-20772 Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability
CVE-2022-20772: Cisco Email Security Appliance and Cisco Secure Email and Web Manager HTTP Response Header Injection Vulnerability
A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this vulnerability by injecting malicious HTTP headers, controlling the response body, or splitting the response into multiple responses. Cisco has released software updates that address this vulnerability. There are no
CVSS: 3.1
CWE: CWE-113, CWE-113
Bug IDs: CSCvz24026, CSCwa84908, CSCwa84908, CSCvz24026
GHSA
GHSA-9p6x-p535-c54c: A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to cond
ghsa_unreviewed·2022-11-04
CVE-2022-20772 [MEDIUM] CWE-113 GHSA-9p6x-p535-c54c: A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to cond
A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this vulnerability by injecting malicious HTTP headers, controlling the response body, or splitting the response into multiple responses.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-11-04
Published