← Back

CVE-2020-3370

nvd nist
Published: Jul 16, 2020Modified: Nov 21, 2024

JSON object

Loading...
5.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted, malicious HTTP request to an affected device. A successful exploit could allow the attacker to redirect users to malicious sites.

Affected (2)

1 product
Email Security Appliance
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Before 13.0.1
From 13.5.0 to 13.5.1

Timeline

No history available yet.