Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.1
CVSSv3

CVE-2022-20713

Published: 10/08/2022 Updated: 16/02/2024
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Cisco

Vulnerability Summary

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to conduct browser-based attacks against users of an affected device. This vulnerability is due to improper validation of input that is passed to the VPN web client services component before being returned to the browser that is in use. An attacker could exploit this vulnerability by persuading a user to visit a website that is designed to pass malicious requests to a device that is running Cisco ASA Software or Cisco FTD Software and has web services endpoints supporting VPN features enabled. A successful exploit could allow the malicious user to reflect malicious input from the affected device to the browser that is in use and conduct browser-based attacks, including cross-site scripting attacks. The attacker could not directly impact the affected device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firepower threat defense 6.2.3

cisco firepower threat defense 6.2.3.1

cisco firepower threat defense 6.4.0

cisco firepower threat defense 6.2.3.13

cisco firepower threat defense 6.2.3.14

cisco firepower threat defense 6.2.3.15

cisco firepower threat defense 6.2.3.12

cisco firepower threat defense 6.6.0.1

cisco firepower threat defense 6.6.0

cisco adaptive security appliance software 9.16.1

cisco firepower threat defense 7.1.0

cisco firepower threat defense 7.0.0

cisco firepower threat defense 6.7.0

cisco firepower threat defense 7.2.0.1

cisco firepower threat defense 7.0.1

cisco firepower threat defense 7.0.0.1

cisco firepower threat defense 7.0.1.1

cisco firepower threat defense 7.0.2

cisco firepower threat defense 7.0.2.1

cisco firepower threat defense 7.0.3

cisco firepower threat defense 7.0.4

cisco firepower threat defense 6.6.1

cisco firepower threat defense 6.6.3

cisco firepower threat defense 6.6.4

cisco firepower threat defense 6.6.5

cisco firepower threat defense 6.6.5.1

cisco firepower threat defense 6.6.5.2

cisco firepower threat defense 7.1.0.1

cisco firepower threat defense 7.1.0.2

cisco firepower threat defense 7.2.0

cisco firepower threat defense 6.2.3.2

cisco firepower threat defense 6.2.3.3

cisco firepower threat defense 6.2.3.4

cisco firepower threat defense 6.2.3.5

cisco firepower threat defense 6.2.3.6

cisco firepower threat defense 6.2.3.7

cisco firepower threat defense 6.2.3.8

cisco firepower threat defense 6.2.3.10

cisco firepower threat defense 6.2.3.11

cisco firepower threat defense 6.2.3.9

cisco firepower threat defense 6.2.3.16

cisco firepower threat defense 6.2.3.17

cisco firepower threat defense 6.2.3.18

cisco firepower threat defense 6.4.0.1

cisco firepower threat defense 6.4.0.3

cisco firepower threat defense 6.4.0.2

cisco firepower threat defense 6.4.0.4

cisco firepower threat defense 6.4.0.5

cisco firepower threat defense 6.4.0.6

cisco firepower threat defense 6.4.0.7

cisco firepower threat defense 6.4.0.8

cisco firepower threat defense 6.4.0.9

cisco firepower threat defense 6.4.0.10

cisco firepower threat defense 6.4.0.11

cisco firepower threat defense 6.4.0.12

cisco firepower threat defense 6.4.0.13

cisco firepower threat defense 6.4.0.14

cisco firepower threat defense 6.7.0.1

cisco firepower threat defense 6.7.0.2

cisco firepower threat defense 6.7.0.3

cisco firepower threat defense 6.6.7

cisco firepower threat defense 7.2.1

cisco firepower threat defense 7.2.2

cisco firepower threat defense 7.2.3

cisco adaptive security appliance software 9.8.2

cisco adaptive security appliance software 9.8.3.18

cisco adaptive security appliance software 9.8.3.26

cisco adaptive security appliance software 9.12.2

cisco adaptive security appliance software 9.8.2.24

cisco adaptive security appliance software 9.8.3.16

cisco adaptive security appliance software 9.8.4.29

cisco adaptive security appliance software 9.12.2.5

cisco adaptive security appliance software 9.12.4.4

cisco adaptive security appliance software 9.8.2.20

cisco adaptive security appliance software 9.8.4

cisco adaptive security appliance software 9.8.4.26

cisco adaptive security appliance software 9.14.1.30

cisco adaptive security appliance software 9.14.1.15

cisco adaptive security appliance software 9.8.2.26

cisco adaptive security appliance software 9.8.2.28

cisco adaptive security appliance software 9.8.2.33

cisco adaptive security appliance software 9.8.2.35

cisco adaptive security appliance software 9.8.2.38

cisco adaptive security appliance software 9.8.4.8

cisco adaptive security appliance software 9.8.4.10

cisco adaptive security appliance software 9.8.4.12

cisco adaptive security appliance software 9.8.4.15

cisco adaptive security appliance software 9.8.4.45

cisco adaptive security appliance software 9.12.3.2

cisco adaptive security appliance software 9.12.3.7

cisco adaptive security appliance software 9.12.4

cisco adaptive security appliance software 9.12.3.12

cisco adaptive security appliance software 9.12.4.37

cisco adaptive security appliance software 9.12.4.38

cisco adaptive security appliance software 9.12.4.39

cisco adaptive security appliance software 9.14.2

cisco adaptive security appliance software 9.14.2.4

cisco adaptive security appliance software 9.14.2.8

cisco adaptive security appliance software 9.14.2.13

cisco adaptive security appliance software 9.14.2.15

cisco adaptive security appliance software 9.15.1.15

cisco adaptive security appliance software 9.15.1.16

cisco adaptive security appliance software 9.15.1.17

cisco adaptive security appliance software 9.15.1.1

cisco adaptive security appliance software 9.8.4.25

cisco adaptive security appliance software 9.17.1

cisco adaptive security appliance software 9.8.1

cisco adaptive security appliance software 9.8.2.17

cisco adaptive security appliance software 9.8.3.11

cisco adaptive security appliance software 9.8.3.29

cisco adaptive security appliance software 9.8.4.3

cisco adaptive security appliance software 9.8.4.20

cisco adaptive security appliance software 9.8.4.41

cisco adaptive security appliance software 9.8.4.44

cisco adaptive security appliance software 9.12.3

cisco adaptive security appliance software 9.12.3.9

cisco adaptive security appliance software 9.12.4.26

cisco adaptive security appliance software 9.12.4.30

cisco adaptive security appliance software 9.14.1.10

cisco adaptive security appliance software 9.14.1.19

cisco adaptive security appliance software 9.14.3

cisco adaptive security appliance software 9.14.3.9

cisco adaptive security appliance software 9.15.1

cisco adaptive security appliance software 9.15.1.10

cisco adaptive security appliance software 9.15.1.21

cisco adaptive security appliance software 9.16.1.28

cisco adaptive security appliance software 9.17.1.7

cisco adaptive security appliance software 9.16.3.14

cisco adaptive security appliance software 9.16.4

cisco adaptive security appliance software 9.18.2.5

cisco adaptive security appliance software 9.17.1.10

cisco adaptive security appliance software 9.17.1.13

cisco adaptive security appliance software 9.18.1

cisco adaptive security appliance software 9.18.1.3

cisco adaptive security appliance software 9.8.1.7

cisco adaptive security appliance software 9.8.2.8

cisco adaptive security appliance software 9.8.2.14

cisco adaptive security appliance software 9.8.3.21

cisco adaptive security appliance software 9.8.3

cisco adaptive security appliance software 9.8.4.32

cisco adaptive security appliance software 9.8.4.33

cisco adaptive security appliance software 9.8.4.34

cisco adaptive security appliance software 9.8.4.35

cisco adaptive security appliance software 9.8.4.39

cisco adaptive security appliance software 9.12.1

cisco adaptive security appliance software 9.12.1.2

cisco adaptive security appliance software 9.12.1.3

cisco adaptive security appliance software 9.12.4.10

cisco adaptive security appliance software 9.12.4.13

cisco adaptive security appliance software 9.12.4.8

cisco adaptive security appliance software 9.12.4.18

cisco adaptive security appliance software 9.14.1

cisco adaptive security appliance software 9.14.3.13

cisco adaptive security appliance software 9.14.3.18

cisco adaptive security appliance software 9.14.3.15

cisco adaptive security appliance software 9.14.4

cisco adaptive security appliance software 9.16.2.3

cisco adaptive security appliance software 9.16.2.7

cisco adaptive security appliance software 9.16.2.11

cisco adaptive security appliance software 9.16.2.13

cisco adaptive security appliance software 9.16.2.14

cisco adaptive security appliance software 9.14.4.7

cisco adaptive security appliance software 9.14.4.12

cisco adaptive security appliance software 9.17.1.11

cisco adaptive security appliance software 9.17.1.15

cisco adaptive security appliance software 9.8.4.22

cisco adaptive security appliance software 9.12.4.2

cisco adaptive security appliance software 9.17.1.9

cisco adaptive security appliance software 9.8.1.5

cisco adaptive security appliance software 9.8.2.15

cisco adaptive security appliance software 9.8.3.8

cisco adaptive security appliance software 9.8.3.14

cisco adaptive security appliance software 9.8.4.7

cisco adaptive security appliance software 9.8.4.17

cisco adaptive security appliance software 9.8.4.40

cisco adaptive security appliance software 9.8.4.43

cisco adaptive security appliance software 9.12.2.4

cisco adaptive security appliance software 9.12.2.9

cisco adaptive security appliance software 9.12.2.1

cisco adaptive security appliance software 9.12.4.7

cisco adaptive security appliance software 9.12.4.24

cisco adaptive security appliance software 9.12.4.29

cisco adaptive security appliance software 9.12.4.35

cisco adaptive security appliance software 9.14.1.6

cisco adaptive security appliance software 9.14.3.1

cisco adaptive security appliance software 9.14.3.11

cisco adaptive security appliance software 9.14.4.6

cisco adaptive security appliance software 9.15.1.7

cisco adaptive security appliance software 9.16.2

cisco adaptive security appliance software 9.16.3.3

cisco adaptive security appliance software 9.16.3

cisco adaptive security appliance software 9.18.2

cisco adaptive security appliance software 9.8.4.46

cisco adaptive security appliance software 9.19.1

cisco adaptive security appliance software 9.18.2.8

cisco adaptive security appliance software 9.18.2.7

cisco adaptive security appliance software 9.17.1.20

cisco adaptive security appliance software 9.16.4.9

cisco adaptive security appliance software 9.16.3.23

cisco adaptive security appliance software 9.16.3.19

cisco adaptive security appliance software 9.16.3.15

cisco adaptive security appliance software 9.14.4.17

cisco adaptive security appliance software 9.14.4.15

cisco adaptive security appliance software 9.14.4.14

cisco adaptive security appliance software 9.14.4.13

cisco adaptive security appliance software 9.12.4.55

cisco adaptive security appliance software 9.12.4.54

cisco adaptive security appliance software 9.12.4.52

cisco adaptive security appliance software 9.12.4.50

cisco adaptive security appliance software 9.12.4.48

cisco adaptive security appliance software 9.12.4.47

cisco adaptive security appliance software 9.12.4.41

cisco adaptive security appliance software 9.12.4.40

cisco firepower threat defense 7.3.1.1

cisco firepower threat defense 7.3.1

cisco firepower threat defense 7.3.0

cisco firepower threat defense 7.1.0.3

cisco firepower threat defense 7.0.5

cisco firepower threat defense 6.6.7.1

cisco firepower threat defense 6.4.0.16

cisco firepower threat defense 6.4.0.15

Vendor Advisories

Cisco: Cisco Adaptive Security Appliance Software Clientless SSL VPN Client-Side Request Smuggling Vulnerability
A vulnerability in the Clientless SSL VPN (WebVPN) component of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct browser-based attacks This vulnerability is due to improper validation of input that is passed to the Clientless SSL VPN component An attacker could exploit this vulnerability ...
Cisco: Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities
Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service (DoS) condition For more information about these vulnerabilities, see th ...

References

CWE-79https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-webvpn-LOeKsNmOhttps://nvd.nist.govhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-webvpn-LOeKsNmO
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook