Tracker / CVE-2022-20772
CVE-2022-20772
Medium 4.7
A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vulnerability is due to the failure of the application or its environment to properly sanitize input values. An attacker could exploit this vulnerability by injecting malicious HTTP headers, controlling the response body, or splitting the response into multiple responses.
Affected products and versions
| cisco | email_security_appliance_firmware · 13.5.1 → 14.0.3-015 |
|---|---|
| cisco | email_security_appliance_firmware · 14.1 → 14.2.1-015 |
| cisco | email_security_appliance_firmware · 14.3 → 14.3.0-023 |
| cisco | secure_email_and_web_manager_firmware · 14.2 → 14.2.0-217 |
| cisco | secure_email_and_web_manager_firmware · 14.3 → 14.3.0-115 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.