CVE-2022-20637 Cisco Security Manager Cross-Site Scripting Vulnerabilities

What is CVE-2022-20637?

CVE-2022-20637 is a medium-severity cross-site scripting vulnerability in Cisco Security Manager, published on 14 Jan 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.

Weakness: CWE-79

Which versions are affected by CVE-2022-20637?

It affects 1 product.

Products include Cisco Security Manager.

How do I fix CVE-2022-20637?

No fix has been published for CVE-2022-20637 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2022-20637 being exploited?

There is no known exploitation of CVE-2022-20637 in the wild and no public exploit code.

Other vulnerabilities in Cisco Security Manager

• CVE-2020-27130 Cisco Security Manager Path Traversal Vulnerability Critical 9.1
• CVE-2020-27131 Cisco Security Manager Java Deserialization Vulnerabilities High 8.1
• CVE-2020-27125 Cisco Security Manager Static Credential Vulnerability High 7.4
• CVE-2014-3267 Cross-site request forgery in n/a Medium 6.8
• CVE-2008-3820 Misconfiguration in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-m56r-5542-frj8.