CVE-2023-20119

Summary

CVE-2023-20119 is a cross-site scripting (XSS) vulnerability affecting the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager. An unauthenticated, remote attacker can exploit this flaw by crafting malicious links that, if clicked by an affected user, could execute arbitrary script code in the context of the interface or allow access to sensitive browser-based information. The root cause of this vulnerability is insufficient user input validation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.