Read the docs
TI-2024-13192 Aliases CVE-2024-20257GHSA-f37v-v67w-4jmp

Cross-site scripting in Cisco Secure Email

Priority LOW 22CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface.r This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00289 21st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Secure Email11.0.3-238; 11.1.0-069; 11.1.0-131; 11.1.0-128; 12.0.0-419; 12.1.0-071; 12.1.0-087; 12.1.0-089; 13.0.0-392; 13.0.5-007; 13.5.1-277; 13.5.4-038; 12.5.0-066; 12.5.4-041; 12.5.3-041; 14.0.0-698; 14.2.0-620; 14.2.1-020; 14.3.0-032; 15.0.0-104; 15.0.1-030; 15.5.0-048—No fix listedCNA
  • Cisco Secure Email VendorCisco Affected 11.0.3-238; 11.1.0-069; 11.1.0-131; 11.1.0-128; 12.0.0-419; 12.1.0-071; 12.1.0-087; 12.1.0-089; 13.0.0-392; 13.0.5-007; 13.5.1-277; 13.5.4-038; 12.5.0-066; 12.5.4-041; 12.5.3-041; 14.0.0-698; 14.2.0-620; 14.2.1-020; 14.3.0-032; 15.0.0-104; 15.0.1-030; 15.5.0-048 Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:o:cisco:asyncos:11.0.3-238:*:*:*:*:*:*:*11.0.3-238VulnerableCisco
cpe:2.3:o:cisco:asyncos:11.1.0-069:*:*:*:*:*:*:*11.1.0-069VulnerableCisco
cpe:2.3:o:cisco:asyncos:11.1.0-128:*:*:*:*:*:*:*11.1.0-128VulnerableCisco
cpe:2.3:o:cisco:asyncos:11.1.0-131:*:*:*:*:*:*:*11.1.0-131VulnerableCisco
cpe:2.3:o:cisco:asyncos:12.0.0-419:*:*:*:*:*:*:*12.0.0-419VulnerableCisco
cpe:2.3:o:cisco:asyncos:12.1.0-071:*:*:*:*:*:*:*12.1.0-071VulnerableCisco
cpe:2.3:o:cisco:asyncos:12.1.0-087:*:*:*:*:*:*:*12.1.0-087VulnerableCisco
cpe:2.3:o:cisco:asyncos:12.1.0-089:*:*:*:*:*:*:*12.1.0-089VulnerableCisco
cpe:2.3:o:cisco:asyncos:12.5.0-066:*:*:*:*:*:*:*12.5.0-066VulnerableCisco
cpe:2.3:o:cisco:asyncos:12.5.3-041:*:*:*:*:*:*:*12.5.3-041VulnerableCisco
  • cpe:2.3:o:cisco:asyncos:11.0.3-238:*:*:*:*:*:*:* Versions 11.0.3-238 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:11.1.0-069:*:*:*:*:*:*:* Versions 11.1.0-069 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:11.1.0-128:*:*:*:*:*:*:* Versions 11.1.0-128 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:11.1.0-131:*:*:*:*:*:*:* Versions 11.1.0-131 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:12.0.0-419:*:*:*:*:*:*:* Versions 12.0.0-419 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:12.1.0-071:*:*:*:*:*:*:* Versions 12.1.0-071 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:12.1.0-087:*:*:*:*:*:*:* Versions 12.1.0-087 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:12.1.0-089:*:*:*:*:*:*:* Versions 12.1.0-089 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:12.5.0-066:*:*:*:*:*:*:* Versions 12.5.0-066 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:12.5.3-041:*:*:*:*:*:*:* Versions 12.5.3-041 Vulnerable ·Cisco
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:cisco:asyncos:12.5.4-041:*:*:*:*:*:*:*12.5.4-041VulnerableCisco
cpe:2.3:o:cisco:asyncos:13.0.0-392:*:*:*:*:*:*:*13.0.0-392VulnerableCisco
cpe:2.3:o:cisco:asyncos:13.0.5-007:*:*:*:*:*:*:*13.0.5-007VulnerableCisco
cpe:2.3:o:cisco:asyncos:13.5.1-277:*:*:*:*:*:*:*13.5.1-277VulnerableCisco
cpe:2.3:o:cisco:asyncos:13.5.4-038:*:*:*:*:*:*:*13.5.4-038VulnerableCisco
cpe:2.3:o:cisco:asyncos:14.0.0-698:*:*:*:*:*:*:*14.0.0-698VulnerableCisco
cpe:2.3:o:cisco:asyncos:14.2.0-620:*:*:*:*:*:*:*14.2.0-620VulnerableCisco
cpe:2.3:o:cisco:asyncos:14.2.1-020:*:*:*:*:*:*:*14.2.1-020VulnerableCisco
cpe:2.3:o:cisco:asyncos:14.3.0-032:*:*:*:*:*:*:*14.3.0-032VulnerableCisco
cpe:2.3:o:cisco:asyncos:15.0.0-104:*:*:*:*:*:*:*15.0.0-104VulnerableCisco
cpe:2.3:o:cisco:asyncos:15.0.1-030:*:*:*:*:*:*:*15.0.1-030VulnerableCisco
cpe:2.3:o:cisco:asyncos:15.5.0-048:*:*:*:*:*:*:*15.5.0-048VulnerableCisco
cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c100v:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c300v:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c600v:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:secure_email_gateway_c195:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:secure_email_gateway_c395:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:secure_email_gateway_c695:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:asyncos:12.5.4-041:*:*:*:*:*:*:* Versions 12.5.4-041 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:13.0.0-392:*:*:*:*:*:*:* Versions 13.0.0-392 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:13.0.5-007:*:*:*:*:*:*:* Versions 13.0.5-007 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:13.5.1-277:*:*:*:*:*:*:* Versions 13.5.1-277 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:13.5.4-038:*:*:*:*:*:*:* Versions 13.5.4-038 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:14.0.0-698:*:*:*:*:*:*:* Versions 14.0.0-698 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:14.2.0-620:*:*:*:*:*:*:* Versions 14.2.0-620 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:14.2.1-020:*:*:*:*:*:*:* Versions 14.2.1-020 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:14.3.0-032:*:*:*:*:*:*:* Versions 14.3.0-032 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:15.0.0-104:*:*:*:*:*:*:* Versions 15.0.0-104 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:15.0.1-030:*:*:*:*:*:*:* Versions 15.0.1-030 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:asyncos:15.5.0-048:*:*:*:*:*:*:* Versions 15.5.0-048 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c100v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c300v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c600v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:secure_email_gateway_c195:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:secure_email_gateway_c395:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:secure_email_gateway_c695:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-20257
  2. 2026-10-03 Alias added: GHSA-f37v-v67w-4jmp

References

Advisory 1

  • TI-2026-74174 Arbitrary file write in Cisco Secure Email Gateway via AMP feature KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-14683 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability KEVCVSS 3.1CRITICAL 10.0
  • TI-2021-13698 Cisco Web Security Appliance Proxy Service Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2018-11020 Cisco Email Security Appliance URL Filtering Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2019-01567 Cisco Email Security Appliance Denial of Service Vulnerability CVSS 3.1HIGH 8.6
See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences