Read the docs
TI-2020-02994 Aliases CVE-2020-3447GHSA-pqcf-jf74-qjf4

Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability

Priority LOW 30CWE-532Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-532.

Summary

A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to excessive verbosity in certain log subscriptions. An attacker could exploit this vulnerability by accessing specific log files on an affected device. A successful exploit could allow the attacker to obtain sensitive log data, which may include user credentials. To exploit this vulnerability, the attacker would need to have valid credentials at the operator level or higher on the affected device.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00738 54th percentileScored 2026-11-08
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Email Security Appliance (ESA)all versions—No fix listedCNA
  • Cisco Email Security Appliance (ESA) VendorCisco Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:cisco:content_security_management_appliance:*:*:*:*:*:*:*:*before 13.6.1-201VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*before 13.5.1VulnerableCisco
  • cpe:2.3:a:cisco:content_security_management_appliance:*:*:*:*:*:*:*:* Versions before 13.6.1-201 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:* Versions before 13.5.1 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-3447
  2. 2026-10-03 Alias added: GHSA-pqcf-jf74-qjf4

References

Advisory 1

  • TI-2016-01993 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other… CVSS 3.1HIGH 7.5
  • TI-2014-01669 The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email… CVSS 2.0HIGH 8.5
  • TI-2015-05308 Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x… CVSS 2.0HIGH 7.8
  • TI-2013-04730 The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA)… CVSS 2.0HIGH 7.8
  • TI-2019-01602 Cisco Email Security Appliance and Cisco Content Security Management Appliance Denial of Service Vulnerability CVSS 3.1MEDIUM 5.3
  • TI-2020-02726 Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability CVSS 3.1MEDIUM 5.3
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences