CVE-2022-20645

Name of the Vulnerable Software and Affected Versions Cisco Security Manager (affected versions not specified)

Description The issue is related to insufficient validation of user-supplied input by the web-based management interface of Cisco Security Manager, allowing an unauthenticated, remote attacker to conduct cross-site scripting attacks. An attacker could exploit this by persuading a user to click a crafted link, potentially executing arbitrary script code in the context of the interface or accessing sensitive, browser-based information. The vulnerability is also associated with inadequate protection of the web page structure, which could be exploited using a specially crafted web page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.