4.7

CVE-2024-20400

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

 This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

 Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Telepresence Video Communication Server Version x8.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.1.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.1.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.2.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.2.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.5 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.5.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.5.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.6 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.6.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.7 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.7.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.7.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.7.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.8 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.8.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.8.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.8.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.9 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.9.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.9.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.10.0 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.10.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.10.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.10.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.10.4 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.11.0 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.11.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.11.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.11.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x8.11.4 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.0 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.4 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.5 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.6 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.7 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.8 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.5.9 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.6.0 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.6.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.6.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.6.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.6.4 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.7.0 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x12.7.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.4 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.5 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.6 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.7 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.8 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.9 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.10 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.0.11 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.2.0 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.2.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.2.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.2.5 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.2.6 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.2.7 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.3.0 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.3.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.3.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.3.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.3.4 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x14.3.5 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x15.0.0 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Version x15.0.1 SwEdition expressway
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.296
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 4.7 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-redirect-KJsFuXgj
Vendor Advisory