CVE-2022-20784

A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to incorrect handling of certain character combinations inserted into a URL. An attacker could exploit this vulnerability by sending crafted URLs to be processed by an affected device. A successful exploit could allow the attacker to bypass the web proxy and access web content that has been blocked by policy.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-filter-bypass-XXXTU3XVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-filter-bypass-XXXTU3XVendor Advisory

Published

Apr 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20779Multiple vulnerabilities in Cisco Enterprise NFV Infrastruct…8.8
• CVE-2022-2078A vulnerability was found in the Linux kernel's nft_set_desc…5.5
• CVE-2022-20780Multiple vulnerabilities in Cisco Enterprise NFV Infrastruct…7.4
• CVE-2022-20781A vulnerability in the web-based management interface of Cis…5.4
• CVE-2022-20782A vulnerability in the web-based management interface of Cis…6.5
• CVE-2022-20783A vulnerability in the packet processing functionality of Ci…7.5
• CVE-2022-20785On April 20, 2022, the following vulnerability in the ClamAV…7.5
• CVE-2022-20786A vulnerability in the web-based management interface of Cis…8.1
• CVE-2022-20787A vulnerability in the web-based management interface of Cis…6.8
• CVE-2022-20788A vulnerability in the web-based management interface of Cis…6.1
• CVE-2022-20789A vulnerability in the software upgrade process of Cisco Uni…6.5
• CVE-2022-2079Cross-site Scripting (XSS) - Stored in GitHub repository noc…5.4