Security features bypass in Cisco Email Security Appliance - CVE-2023-20057
Published: January 18, 2023
Vulnerability identifier: #VU71330
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-20057
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass URL filtering.
The vulnerability exists due to improper processing of URLs. A remote attacker can bypass the URL reputation filters that are configured for an affected device, which could allow malicious URLs to pass through the device.
Affected software
Cisco Email Security Appliance
How to mitigate CVE-2023-20057
Install updates from vendor's website.