CVE-2022-20664

CVE-2022-20664 is a high-severity vulnerability in the web management interface of Cisco Secure Email and Web Manager and Cisco Email Security Appliance. It allows an authenticated, remote attacker to retrieve sensitive information, including user credentials, from an external LDAP authentication server due to improper input sanitization. The vulnerability has a CVSS score of 7.7 (High) and requires valid operator-level or higher credentials for exploitation. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing. Community discussion and media coverage are minimal, suggesting limited public awareness or active threat actor interest at this time.