ID
VAR-202201-1474
CVE
CVE-2022-20639
TITLE
Cisco Security Manager Cross-site scripting vulnerability in
Trust: 0.8
DESCRIPTION
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. Cisco Security Manager Exists in a cross-site scripting vulnerability.Information may be obtained and information may be tampered with. Cisco Security Manager (CSM) is a set of enterprise-level management applications from Cisco, which is mainly used to configure firewall, VPN and intrusion prevention security services on Cisco network and security devices
Trust: 1.8
AFFECTED PRODUCTS
| vendor: | cisco | model: | security manager | scope: | lt | version: | 4.24 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco security manager | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco security manager | scope: | eq | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-79 | Trust: 1.1 |
| problemtype: | Cross-site scripting (CWE-79) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
XSS
Trust: 0.6
PATCH
| title: | cisco-sa-csm-mult-xss-7hmOKQTt | url: | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-mult-xss-7hmOKQTt | Trust: 0.8 |
| title: | Cisco Security Manager Security vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=177963 | Trust: 0.6 |
| title: | Cisco: Cisco Security Manager Cross-Site Scripting Vulnerabilities | url: | https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-csm-mult-xss-7hmOKQTt | Trust: 0.1 |
| title: | CVE-2022-XXXX | url: | https://github.com/AlphabugX/CVE-2022-23305 | Trust: 0.1 |
| title: | CVE-2022-XXXX | url: | https://github.com/AlphabugX/CVE-2022-RCE | Trust: 0.1 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2022-20639 | Trust: 3.4 |
| db: | JVNDB | id: | JVNDB-2022-003107 | Trust: 0.8 |
| db: | CS-HELP | id: | SB2022012509 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202201-1158 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2022-06385 | Trust: 0.1 |
| db: | VULHUB | id: | VHN-405192 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2022-20639 | Trust: 0.1 |
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-csm-mult-xss-7hmokqtt | Trust: 1.9 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2022-20639 | Trust: 1.4 |
| url: | https://www.cybersecurity-help.cz/vdb/sb2022012509 | Trust: 0.6 |
| url: | https://cwe.mitre.org/data/definitions/79.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
| url: | https://github.com/alphabugx/cve-2022-23305 | Trust: 0.1 |
SOURCES
| db: | VULHUB | id: | VHN-405192 |
| db: | VULMON | id: | CVE-2022-20639 |
| db: | JVNDB | id: | JVNDB-2022-003107 |
| db: | CNNVD | id: | CNNVD-202201-1158 |
| db: | NVD | id: | CVE-2022-20639 |
LAST UPDATE DATE
2024-08-14T13:22:47.045000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-405192 | date: | 2022-01-20T00:00:00 |
| db: | VULMON | id: | CVE-2022-20639 | date: | 2023-11-07T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-003107 | date: | 2023-02-08T05:45:00 |
| db: | CNNVD | id: | CNNVD-202201-1158 | date: | 2022-01-26T00:00:00 |
| db: | NVD | id: | CVE-2022-20639 | date: | 2023-11-07T03:42:30.280 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-405192 | date: | 2022-01-14T00:00:00 |
| db: | VULMON | id: | CVE-2022-20639 | date: | 2022-01-14T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-003107 | date: | 2023-02-08T00:00:00 |
| db: | CNNVD | id: | CNNVD-202201-1158 | date: | 2022-01-14T00:00:00 |
| db: | NVD | id: | CVE-2022-20639 | date: | 2022-01-14T05:15:10.430 |