What is CVE-2020-3117?

CVE-2020-3117 is a medium-severity vulnerability in Cisco Web Security Appliance (Wsa), classified under HTTP Response Splitting. CVSS score: 4.7/10. Published 2020-09-23.

How severe is CVE-2020-3117?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Vulnerability in Cisco Web Security Appliance (Wsa)

CVE-2020-3117

A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to inject crafted HTTP headers in the web se…

EPSS: 0.009 (56.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N.

Affected products

Cisco Web Security Appliance (Wsa) — versions n/a
Cisco Content_security_management_appliance
Cisco Web_security_appliance — versions 11.8.0-382, 12.0.1-268

Weakness classification (CWE)

CWE-113 — HTTP Response Splitting

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3117?: CVE-2020-3117 is a medium-severity vulnerability in Cisco Web Security Appliance (Wsa), classified under HTTP Response Splitting. CVSS score: 4.7/10. Published 2020-09-23.
How severe is CVE-2020-3117?: Medium severity. CVSS v3 base score is 4.7 out of 10.