Lucene search
K

208 matches found

CNNVD
CNNVD
added 2022/11/04 12:0 a.m.2 views

Cisco BroadWorks CommPilot 代码问题漏洞

Cisco BroadWorks CommPilot is a carrier-grade unified communications software platform optimized for performance and scale from Cisco, U.S.A. BroadWorks is hosted by service providers and enables the deployment of cloud calls from a common network platform on any type of wired or wireless network...

7.7CVSS6.7AI score0.01873EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/11/03 7:26 p.m.25 views

CVE-2022-20958

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request forgery SSRF attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input. ...

8.3CVSS8.7AI score0.0095EPSS
Exploits0References1
CVE
CVE
added 2022/11/03 7:26 p.m.61 views

CVE-2022-20958

The CVE-2022-20958 issue affects Cisco BroadWorks CommPilot Web-based Management Interface. The vulnerability is due to insufficient validation of user-supplied input, enabling an unauthenticated remote attacker to perform a server-side request forgery (SSRF) against the BroadWorks server and oth...

8.8CVSS8.4AI score0.0095EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/11/03 7:26 p.m.25 views

CVE-2022-20951

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to perform a server-side request forgery SSRF attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

7.7CVSS7.6AI score0.01873EPSS
Exploits0References1
CVE
CVE
added 2022/11/03 7:26 p.m.69 views

CVE-2022-20951

The CVE-2022-20951 entry affects Cisco BroadWorks CommPilot (web-based management interface). Affects an authenticated, remote attacker via input validation flaws that enable server-side request forgery (SSRF) to access confidential information on the BroadWorks server or other network devices. I...

7.7CVSS6.3AI score0.01873EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/03 7:26 p.m.12 views

CVE-2022-20951

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to perform a server-side request forgery SSRF attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

7.7CVSS6.9AI score0.01873EPSS
Exploits0References1
Cisco
Cisco
added 2022/11/02 4:0 p.m.42 views

Cisco BroadWorks CommPilot Application Software Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device or obtain confidential information from the Cisco BroadWorks server and other devices on...

8.3CVSS7.7AI score0.01873EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/11/02 12:0 a.m.5 views

PT-2022-6063 · Cisco · Cisco Broadworks Commpilot

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to...

8.8CVSS8.5AI score0.0095EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2022/11/02 12:0 a.m.5 views

PT-2022-5477 · Cisco · Cisco Broadworks Commpilot

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to...

7.7CVSS6.4AI score0.01873EPSS
Exploits0References11
BDU FSTEC
BDU FSTEC
added 2022/11/02 12:0 a.m.8 views

The vulnerability in the web interface of Cisco BroadWorks Hosted Thin Receptionist allows a attacker to disclose protected information.

The vulnerability of the Cisco BroadWorks Hosted Thin Receptionist software’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

5.5CVSS5.4AI score0.00418EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.5 views

PT-2022-6769 · Cisco · Cisco Broadworks Xtended Services Platform +3

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Cisco BroadWorks Application Server AS affected versions not specified Cisco BroadWorks Xtended Services Platform XSP affected versions not specified BroadWorks...

5.5CVSS5.5AI score0.00358EPSS
Exploits0References5
Cisco
Cisco
added 2022/10/05 4:0 p.m.26 views

Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability

A vulnerability in the web management interface of Cisco BroadWorks Hosted Thin Receptionist could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient user input validation. An attacker cou...

5.4CVSS0.7AI score0.00418EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/10/05 12:0 a.m.2 views

Cisco BroadWorks 跨站脚本漏洞

Cisco BroadWorks is a carrier-grade unified communications software platform from Cisco. It is used to deploy cloud calls from public network platforms on any type of wired or wireless network architecture. A cross-site scripting vulnerability exists in Cisco BroadWorks Hosted Thin Receptionist,...

5.4CVSS5.2AI score0.00418EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/10/05 12:0 a.m.2 views

PT-2022-5298 · Cisco · Cisco Broadworks Hosted Thin Receptionist

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks Hosted Thin Receptionist affected versions not specified Description: A vulnerability in the web management interface could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

5.5CVSS6.2AI score0.00418EPSS
Exploits0References6
OSV
OSV
added 2022/08/10 9:15 a.m.2 views

CVE-2022-20869

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

6.1CVSS6AI score0.00536EPSS
Exploits0References1
NVD
NVD
added 2022/08/10 9:15 a.m.17 views

CVE-2022-20869

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

6.1CVSS0.00536EPSS
Exploits0References1
Prion
Prion
added 2022/08/10 9:15 a.m.10 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

5.8CVSS6.1AI score0.00536EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/10 8:10 a.m.11 views

CVE-2022-20869 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

6.1CVSS6.6AI score0.00536EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/08/10 8:10 a.m.20 views

CVE-2022-20869 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

6.1CVSS6.4AI score0.00536EPSS
Exploits0References1
CVE
CVE
added 2022/08/10 8:10 a.m.92 views

CVE-2022-20869

CVE-2022-20869 affects Cisco BroadWorks Application Delivery Platform Software, specifically its web-based management interface. The vulnerability is a cross-site scripting flaw caused by insufficient input validation, allowing an unauthenticated, remote attacker to persuade a user to click a cra...

6.1CVSS6.2AI score0.00536EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder