CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Cisco. It may be remotely exploitable.
CVE
CVE-2023-20120
Severity
MEDIUM
CVSS
5.4
EPSS
0.47%
Cisco
Original NVD Description
Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email Security Appliance (ESA); and Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.
Related CVEs
Other vulnerabilities affecting the same vendor(s)