CVE:CVE-2023-20028
CNNVD:CNNVD-202306-2002
Cisco Email Security Appliance（ESA）是美国思科（Cisco）公司的一个电子邮件安全设备。AsyncOS Software是运行在其中的一套操作系统。
Cisco AsyncOS Software存在安全漏洞，该漏洞源于存在存储型跨站脚本（XSS）漏洞。受影响的产品：Cisco Secure Email and Web Manager，Cisco Secure Web Appliance。
solution:Upgrade cisco secure_email_and_web_manager to a higher version than 14.0.0-418,14.0.1-033,14.0.1-053,15.0.0-050,15.0.0-256,and avoid the version 14.0.0-418,14.0.1-033,14.0.1-053,15.0.0-050,15.0.0-256; Upgrade cisco secure_email_gateway to a higher version than 14.0.0-418,14.0.1-033,14.0.1-053,15.0.0-050,15.0.0-256,and avoid the version 14.0.0-418,14.0.1-033,14.0.1-053,15.0.0-050,15.0.0-256; Upgrade cisco web_security_appliance to a higher version than 14.0.0-418,14.0.1-033,14.0.1-053,15.0.0-050,15.0.0-256,and avoid the version 14.0.0-418,14.0.1-033,14.0.1-053,15.0.0-050,15.0.0-256