CVE-2022-20641— Cisco Security Manager 跨站脚本漏洞
Possible ATT&CK Techniques 3AI
T1005 · Data from Local System T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-20641の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Security Manager Cross-Site Scripting Vulnerabilities
ソース: CVE Program / CVE List V5
脆弱性説明
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ソース: CVE Program / CVE List V5
脆弱性タイプ
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
ソース: CVE Program / CVE List V5
脆弱性タイトル
Cisco Security Manager 跨站脚本漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Security Manager（CSM）是美国思科（Cisco）公司的一套企业级的管理应用，它主要用于在Cisco网络和安全设备上配置防火墙、VPN和入侵保护安全服务。 Cisco Security Manager 存在安全漏洞，该漏洞源于Cisco Security Manager基于web的管理界面存在多个漏洞，攻击者可利用该漏洞对该界面的用户进行跨站点脚本攻击。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Security Manager | n/a | - |
II. CVE-2022-20641の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-20641のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Cisco · 2022-01-14 · 16 CVEs total
| CVE-2022-20658 | 9.6 CRITICAL | Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager P |
| CVE-2022-20698 | 7.5 HIGH | Clam AntiVirus (ClamAV) Denial of Service Vulnerability |
| CVE-2022-20640 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20642 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20643 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20644 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20645 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20646 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20647 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20635 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20636 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20637 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20638 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20639 | 6.1 MEDIUM | Cisco Security Manager Cross-Site Scripting Vulnerabilities |
| CVE-2022-20660 | 4.6 MEDIUM | Cisco IP Phones Information Disclosure Vulnerability |
IV. 関連脆弱性
同じ製品: Cisco Security Manager
- CVE-2022-20639
Cisco Security Manager Cross-Site Scripting Vulnerabilities - CVE-2022-20638
Cisco Security Manager Cross-Site Scripting Vulnerabilities - CVE-2022-20637
Cisco Security Manager Cross-Site Scripting Vulnerabilities - CVE-2022-20636
Cisco Security Manager Cross-Site Scripting Vulnerabilities - CVE-2022-20635
Cisco Security Manager Cross-Site Scripting Vulnerabilities
同じベンダー: Cisco
- CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure - CVE-2026-20348
ClamAV XAR File Format Processing Memory Corruption Vulnerab - CVE-2026-20345
ClamAV GPT File Format Processing Memory Corruption Vulnerab - CVE-2026-20339
ClamAV PESpin File Format Processing Integer Overflow Vulner - CVE-2026-20347
ClamAV Mach-O File Format Processing Memory Corruption Vulne
同じ弱点: CWE-79
- CVE-2026-19998
code-projects Online Shopping System offersmail.php cross si - CVE-2026-19995
Webkul Bagisto RMA Message send-message cross site scripting - CVE-2026-13424
Online Scheduling and Appointment Booking System <= 27.7 - U - CVE-2026-2357
Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) St - CVE-2026-10734
Infility Global <= 2.15.21 - Unauthenticated Stored Cross-Si
V. CVE-2022-20641へのコメント
まだコメントはありません