CVE-2020-3370 - CVE House
Back to Database
Status published Medium CVE-2020-3370

Cisco Content Security Management Appliance Filter Bypass Vulnerability

Vulnerability Description

A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted, malicious HTTP request to an affected device. A successful exploit could allow the attacker to redirect users to malicious sites.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-3370

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Cisco Email Security Appliance (ESA)
Vulnerable Versions:
Unknown

Timeline

Official Publish: July 16th, 2020
Last Modified: November 15th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Weaknesses (CWE)