Critical severity · published Feb 10, 2022
CVE-2022-20738
Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability
9.8
CVSS
1.1%
EPSS
No
On KEV
Description
A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exploit this vulnerability by downloading a crafted payload through specific methods. A successful exploit could allow the attacker to bypass file inspection protections and download a malicious payload.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cisco Umbrella Insights Virtual Appliance · Cisco
All versions, or not specified · source: vendor
US
Umbrella Secure Web Gateway · Cisco
All versions, or not specified · source: NVD
Affected product
CU
Cisco Umbrella Insights Virtual Appliance
Cisco
More from Cisco Umbrella Insights Virtual Appliance
8.6
CVE-2021-1474
Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
7.5
CVE-2022-20773
Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability
6.5
CVE-2022-20922
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote…
6.0
CVE-2026-20246
Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
5.8
CVE-2026-20221
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities