AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-20798

CRITICAL · CVSS 9.8 EPSS 1.43% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-06-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-20798
Severity
CRITICAL
CVSS
9.8
EPSS
1.43%
Cisco

Original NVD Description

A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass authentication and log in to the web management interface of an affected device. This vulnerability is due to improper authentication checks when an affected device uses Lightweight Directory Access Protocol (LDAP) for external authentication. An attacker could exploit this vulnerability by entering a specific input on the login page of the affected device. A successful exploit could allow the attacker to gain unauthorized access to the web-based management interface of the affected device.