CVE-2024-20504 (GCVE-0-2024-20504)

Vulnerability from cvelistv5 – Published: 2024-11-06 16:29 – Updated: 2024-11-06 17:05
VLAI
Title
Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities
Summary
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Severity
5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CWE
  • CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Assigner
References
Impacted products
Vendor Product Version
Cisco Cisco Secure Email Affected: 14.0.0-698
Affected: 14.2.0-620
Affected: 14.2.1-020
Affected: 14.3.0-032
Affected: 15.0.0-104
Affected: 15.0.1-030
Affected: 15.5.0-048
Affected: 15.5.1-055
Create a notification for this product.
Cisco Cisco Secure Email and Web Manager Affected: 14.0.0-404
Affected: 14.1.0-223
Affected: 14.1.0-227
Affected: 14.2.0-212
Affected: 14.2.0-224
Affected: 14.2.1-020
Affected: 14.3.0-120
Affected: 15.0.0-334
Affected: 15.5.1-024
Affected: 15.5.1-029
Create a notification for this product.
Cisco Cisco Secure Web Appliance Affected: 14.1.0-032
Affected: 14.1.0-047
Affected: 14.1.0-041
Affected: 14.0.2-012
Affected: 14.5.0-498
Affected: 14.0.3-014
Affected: 14.0.4-005
Affected: 14.5.1-008
Affected: 14.5.1-016
Affected: 15.0.0-355
Affected: 15.0.0-322
Affected: 15.1.0-287
Affected: 14.5.2-011
Affected: 15.2.0-116
Affected: 14.0.5-007
Affected: 15.2.0-164
Affected: 14.5.1-510
Affected: 14.5.1-607
Affected: 14.5.3-033
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20504",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T17:05:32.372312Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T17:05:40.097Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Email",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "14.0.0-698"
            },
            {
              "status": "affected",
              "version": "14.2.0-620"
            },
            {
              "status": "affected",
              "version": "14.2.1-020"
            },
            {
              "status": "affected",
              "version": "14.3.0-032"
            },
            {
              "status": "affected",
              "version": "15.0.0-104"
            },
            {
              "status": "affected",
              "version": "15.0.1-030"
            },
            {
              "status": "affected",
              "version": "15.5.0-048"
            },
            {
              "status": "affected",
              "version": "15.5.1-055"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Email and Web Manager",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "14.0.0-404"
            },
            {
              "status": "affected",
              "version": "14.1.0-223"
            },
            {
              "status": "affected",
              "version": "14.1.0-227"
            },
            {
              "status": "affected",
              "version": "14.2.0-212"
            },
            {
              "status": "affected",
              "version": "14.2.0-224"
            },
            {
              "status": "affected",
              "version": "14.2.1-020"
            },
            {
              "status": "affected",
              "version": "14.3.0-120"
            },
            {
              "status": "affected",
              "version": "15.0.0-334"
            },
            {
              "status": "affected",
              "version": "15.5.1-024"
            },
            {
              "status": "affected",
              "version": "15.5.1-029"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Web Appliance",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "14.1.0-032"
            },
            {
              "status": "affected",
              "version": "14.1.0-047"
            },
            {
              "status": "affected",
              "version": "14.1.0-041"
            },
            {
              "status": "affected",
              "version": "14.0.2-012"
            },
            {
              "status": "affected",
              "version": "14.5.0-498"
            },
            {
              "status": "affected",
              "version": "14.0.3-014"
            },
            {
              "status": "affected",
              "version": "14.0.4-005"
            },
            {
              "status": "affected",
              "version": "14.5.1-008"
            },
            {
              "status": "affected",
              "version": "14.5.1-016"
            },
            {
              "status": "affected",
              "version": "15.0.0-355"
            },
            {
              "status": "affected",
              "version": "15.0.0-322"
            },
            {
              "status": "affected",
              "version": "15.1.0-287"
            },
            {
              "status": "affected",
              "version": "14.5.2-011"
            },
            {
              "status": "affected",
              "version": "15.2.0-116"
            },
            {
              "status": "affected",
              "version": "14.0.5-007"
            },
            {
              "status": "affected",
              "version": "15.2.0-164"
            },
            {
              "status": "affected",
              "version": "14.5.1-510"
            },
            {
              "status": "affected",
              "version": "14.5.1-607"
            },
            {
              "status": "affected",
              "version": "14.5.3-033"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-80",
              "description": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-06T16:29:37.791Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-esa-wsa-sma-xss-zYm3f49n",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-xss-zYm3f49n"
        }
      ],
      "source": {
        "advisory": "cisco-sa-esa-wsa-sma-xss-zYm3f49n",
        "defects": [
          "CSCwj72814"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20504",
    "datePublished": "2024-11-06T16:29:37.791Z",
    "dateReserved": "2023-11-08T15:08:07.687Z",
    "dateUpdated": "2024-11-06T17:05:40.097Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-20504",
      "date": "2026-05-30",
      "epss": "0.00192",
      "percentile": "0.40976"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\\r\\n\\r\\nThis vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad en la interfaz de administraci\\u00f3n basada en web de Cisco AsyncOS Software para Cisco Secure Email and Web Manager, Secure Email Gateway y Secure Web Appliance podr\\u00eda permitir que un atacante remoto autenticado realice un ataque de cross-site scripting (XSS) almacenado contra un usuario de la interfaz. Esta vulnerabilidad se debe a una validaci\\u00f3n insuficiente de la entrada del usuario. Un atacante podr\\u00eda aprovechar esta vulnerabilidad persuadiendo a un usuario de una interfaz afectada para que haga clic en un v\\u00ednculo manipulado. Una explotaci\\u00f3n exitosa podr\\u00eda permitir al atacante ejecutar c\\u00f3digo de secuencia de comandos arbitrario en el contexto de la interfaz afectada o acceder a informaci\\u00f3n confidencial basada en el navegador.\"}]",
      "id": "CVE-2024-20504",
      "lastModified": "2024-11-06T18:17:17.287",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.3, \"impactScore\": 2.7}]}",
      "published": "2024-11-06T17:15:16.053",
      "references": "[{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-xss-zYm3f49n\", \"source\": \"ykramarz@cisco.com\"}]",
      "sourceIdentifier": "ykramarz@cisco.com",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": "[{\"source\": \"ykramarz@cisco.com\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-80\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-20504\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2024-11-06T17:15:16.053\",\"lastModified\":\"2025-08-07T19:08:29.290\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\\r\\n\\r\\nThis vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de Cisco AsyncOS Software para Cisco Secure Email and Web Manager, Secure Email Gateway y Secure Web Appliance podr\u00eda permitir que un atacante remoto autenticado realice un ataque de cross-site scripting (XSS) almacenado contra un usuario de la interfaz. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada del usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad persuadiendo a un usuario de una interfaz afectada para que haga clic en un v\u00ednculo manipulado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar c\u00f3digo de secuencia de comandos arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n confidencial basada en el navegador.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-80\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.0.0-698:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A48B45C-E1B4-4524-A095-631C408044A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.2.0-620:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A84B29E7-CB57-4DA8-BA2F-77AA4DB9C394\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.2.1-020:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"189C0A83-6BF1-45AD-ACC1-FB7561B901A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.3.0-032:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B09FBBD-C6BD-4BBD-8DF4-416D59E1E97C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.0.0-104:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"943D850B-D6B1-4B02-BBF6-687C3FD80AAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.0.1-030:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"74FB1274-8F04-4A8A-986F-225BBA4553E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.5.0-048:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05560A50-4EF9-42E9-B8B3-FC99C77089B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.5.1-055:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"421FFF79-BA3D-4968-928C-6F792E9A34AB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c100v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B6FBC8A-8187-4903-B786-6CF341C142B5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c300v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68864429-9730-43E9-96C3-20B9035BB291\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c600v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B52D8B2B-E9AE-4B02-87BD-9CF9FA95906A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_gateway_c195:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B1322B8-1CF9-4B17-9A58-38788051ED4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_gateway_c395:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"139A640B-1957-4953-AA88-9D373A5152D1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_gateway_c695:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F08EA2AD-618B-4834-A52D-73F6A4502DF1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.0.0-404:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F540FA5-3E48-4C4E-8AAF-4DD8629DAF1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.1.0-223:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5DBB5E2-734A-4BDC-B5D5-D6658A278F4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.1.0-227:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC8211F5-85F9-449D-87E0-991F009AFD1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.2.0-212:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"253C1306-4BCE-4314-A57D-CBFDF89386E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.2.0-224:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F90AF26-41D8-40B9-9E49-29C27CA2B4FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.2.1-020:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"189C0A83-6BF1-45AD-ACC1-FB7561B901A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.3.0-120:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1719C5F-39A9-4F56-AF18-AB34A9D73DD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.0.0-334:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C1A7437-AEF6-4426-91E8-4112F76FE019\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.5.1-024:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49913B5D-22C6-41E6-9FAD-3AEB1DD96350\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.5.1-029:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B24DBD60-73D9-4999-8F3C-2D9F7653414D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m100v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C9613A5-B198-4AD2-BC74-F21ABAF79174\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m300v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57831FD6-1CF3-4ABE-81BA-2576418F9083\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_email_and_web_manager_virtual_appliance_m600v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"67E804AE-4743-44AD-A364-504B0AB0D9BF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m170:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3057023B-AD68-4953-A780-75EA416A7B94\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m190:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B87164B6-4717-4968-86F7-C62EB677FC50\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m195:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10BD81D0-D81A-4361-B4E8-D674732A2A33\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m380:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D28903F8-3C4D-4337-9721-CEC108A7E2D5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m390:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84ACD394-2E45-4E8E-A342-AC57935C7038\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m390x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6112D56B-B68B-40B0-8EB9-3315533110C7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m395:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A1198BC-C934-4C26-887D-D599E8128FD3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m680:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10374BA0-E7DD-4930-8C58-251F98B75A11\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m690:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD265B49-C691-44B3-A505-DC704E80313C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m690x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E37CFC3A-1752-4C66-BD32-CFFA46C3E6AD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_email_and_web_manager_m695:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"830693AC-A737-43B9-BBB4-E3A1C950C47F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.0.2-012:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"50BAC418-1CA1-4DB7-8B54-E4754A35F6E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.0.3-014:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3A1AE33-A44E-422C-BBF3-FEF0BD24081D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.0.4-005:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5A91305-1002-4717-AB81-A98C9C30CEA5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.0.5-007:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07433741-D7ED-4742-B449-64D23E002E75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.1.0-032:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1C5EDF4-868A-43B9-B5BA-0F62984F7BE5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.1.0-041:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45B7B8BB-91DA-490B-BA54-27AD44F862A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.1.0-047:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16B7F282-1F20-4C84-A13E-C671BAE3F8D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.5.0-498:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60A56580-C34C-4E5D-B053-9D02F8DD9681\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.5.1-008:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"89DC9472-A8C0-41CB-99DE-B0E160157B3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.5.1-016:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78109D4E-9FAA-4B5A-96E4-6D30D3458BFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.5.1-510:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F615EBAA-EF52-4431-8080-2CF34269BE28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.5.1-607:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE4CBC9-5786-4896-9FF7-C22E02FC9428\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.5.2-011:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"134FF12A-15FB-4D3D-BA99-479C8EEE534B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:14.5.3-033:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3219303-FBC6-43FD-A712-63DACA8A6D43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.0.0-322:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FD96D2A-EE17-4AF6-B8DD-E25F4DCB9313\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.0.0-355:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCD55688-9581-4363-B8A0-2CC4080EA720\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.1.0-287:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1595FF1-D7A9-402C-B8D0-C2ED6E195637\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.2.0-116:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D0F8BE7-992B-455B-8D64-4B0A79B53131\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:asyncos:15.2.0-164:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28BDB938-CB66-457E-BEE6-B115A1E990B6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_web_appliance_virtual_s1000v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09BCBB0F-88F1-4469-A7D4-DA8BCAF5470A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_web_appliance_virtual_s100v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F88A369-E3A2-431A-AB71-CCD4F15E68EB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_web_appliance_virtual_s300v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE8ED2A4-8E08-420D-B377-6D1F5AF675DC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:cisco:secure_web_appliance_virtual_s600v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"780EA177-5623-4AFF-9316-D557BE2BD47D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_web_appliance_s196:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE1F2FAF-C64B-4AEB-8DE4-329C61B8D17F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_web_appliance_s396:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5596058-16DB-46C0-82AC-D9BFC13F4126\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:secure_web_appliance_s696:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62BEA59D-2AF1-4BDF-ACB3-450BED2E5AAB\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-xss-zYm3f49n\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"title\": \"Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Stored Cross-Site Scripting Vulnerabilities\", \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\\r\\n\\r\\nThis vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-xss-zYm3f49n\", \"name\": \"cisco-sa-esa-wsa-sma-xss-zYm3f49n\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"source\": {\"advisory\": \"cisco-sa-esa-wsa-sma-xss-zYm3f49n\", \"discovery\": \"EXTERNAL\", \"defects\": [\"CSCwj72814\"]}, \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)\", \"type\": \"cwe\", \"cweId\": \"CWE-80\"}]}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Email\", \"versions\": [{\"version\": \"14.0.0-698\", \"status\": \"affected\"}, {\"version\": \"14.2.0-620\", \"status\": \"affected\"}, {\"version\": \"14.2.1-020\", \"status\": \"affected\"}, {\"version\": \"14.3.0-032\", \"status\": \"affected\"}, {\"version\": \"15.0.0-104\", \"status\": \"affected\"}, {\"version\": \"15.0.1-030\", \"status\": \"affected\"}, {\"version\": \"15.5.0-048\", \"status\": \"affected\"}, {\"version\": \"15.5.1-055\", \"status\": \"affected\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Email and Web Manager\", \"versions\": [{\"version\": \"14.0.0-404\", \"status\": \"affected\"}, {\"version\": \"14.1.0-223\", \"status\": \"affected\"}, {\"version\": \"14.1.0-227\", \"status\": \"affected\"}, {\"version\": \"14.2.0-212\", \"status\": \"affected\"}, {\"version\": \"14.2.0-224\", \"status\": \"affected\"}, {\"version\": \"14.2.1-020\", \"status\": \"affected\"}, {\"version\": \"14.3.0-120\", \"status\": \"affected\"}, {\"version\": \"15.0.0-334\", \"status\": \"affected\"}, {\"version\": \"15.5.1-024\", \"status\": \"affected\"}, {\"version\": \"15.5.1-029\", \"status\": \"affected\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Web Appliance\", \"versions\": [{\"version\": \"14.1.0-032\", \"status\": \"affected\"}, {\"version\": \"14.1.0-047\", \"status\": \"affected\"}, {\"version\": \"14.1.0-041\", \"status\": \"affected\"}, {\"version\": \"14.0.2-012\", \"status\": \"affected\"}, {\"version\": \"14.5.0-498\", \"status\": \"affected\"}, {\"version\": \"14.0.3-014\", \"status\": \"affected\"}, {\"version\": \"14.0.4-005\", \"status\": \"affected\"}, {\"version\": \"14.5.1-008\", \"status\": \"affected\"}, {\"version\": \"14.5.1-016\", \"status\": \"affected\"}, {\"version\": \"15.0.0-355\", \"status\": \"affected\"}, {\"version\": \"15.0.0-322\", \"status\": \"affected\"}, {\"version\": \"15.1.0-287\", \"status\": \"affected\"}, {\"version\": \"14.5.2-011\", \"status\": \"affected\"}, {\"version\": \"15.2.0-116\", \"status\": \"affected\"}, {\"version\": \"14.0.5-007\", \"status\": \"affected\"}, {\"version\": \"15.2.0-164\", \"status\": \"affected\"}, {\"version\": \"14.5.1-510\", \"status\": \"affected\"}, {\"version\": \"14.5.1-607\", \"status\": \"affected\"}, {\"version\": \"14.5.3-033\", \"status\": \"affected\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2024-11-06T16:29:37.791Z\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-20504\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-11-06T17:05:32.372312Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-11-06T17:05:36.211Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-20504\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"cisco\", \"dateReserved\": \"2023-11-08T15:08:07.687Z\", \"datePublished\": \"2024-11-06T16:29:37.791Z\", \"dateUpdated\": \"2024-11-06T17:05:40.097Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.