CVSS 4.8 · Medium EPSS 0,29%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada cisco asyncos. Skor CVSS 3.1 4.8 (Medium) menurut cisco.com.
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface.r This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | asyncos | Versi 11.0.3-238 |
| cisco | asyncos | Versi 11.1.0-069 |
| cisco | asyncos | Versi 11.1.0-128 |
| cisco | asyncos | Versi 11.1.0-131 |
| cisco | asyncos | Versi 12.0.0-419 |
| cisco | asyncos | Versi 12.1.0-071 |
| cisco | asyncos | Versi 12.1.0-087 |
| cisco | asyncos | Versi 12.1.0-089 |
| cisco | asyncos | Versi 12.5.0-066 |
| cisco | asyncos | Versi 12.5.3-041 |
| cisco | asyncos | Versi 12.5.4-041 |
| cisco | asyncos | Versi 13.0.0-392 |
| cisco | asyncos | Versi 13.0.5-007 |
| cisco | asyncos | Versi 13.5.1-277 |
| cisco | asyncos | Versi 13.5.4-038 |
| cisco | asyncos | Versi 14.0.0-698 |
| cisco | asyncos | Versi 14.2.0-620 |
| cisco | asyncos | Versi 14.2.1-020 |
| cisco | asyncos | Versi 14.3.0-032 |
| cisco | asyncos | Versi 15.0.0-104 |
| cisco | asyncos | Versi 15.0.1-030 |
| cisco | asyncos | Versi 15.5.0-048 |