CVE-2021-1530 Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

Cisco BroadWorks Messaging Server 代码问题漏洞

Cisco BroadWorks Messaging Server is a database server from the American company Cisco Cisco. An XML external entity injection vulnerability exists in Cisco BroadWorks Messaging Server version 22.0. The vulnerability stems from the program not properly handling XML External Entity XXE entries whe...

Broadsoft BroadWorks information leak

Incoming and outgoing calls inrofmation is available without authentication...

Security-Assessment.com Advisory: BroadWorks Call Detail Record Disclosure Vulnerability

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Name : BroadWorks Call Detail Record Disclosure Vulnerability Vendor Website : http://broadsoft.com/products/broadworks/ Date Released : November 2, 2010 Affected Software: BroadWor...

BroadWorks - Call Detail Record Security Bypass

BroadWorks - Call Detail Record Security Bypass source: https://www.securityfocus.com/bid/44597/info BroadWorks is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and to obtain sensitive information. Successful exploits will...

BroadWorks Arbitrary Call Detail Record Eavesdropping

, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Name : BroadWorks Arbitrary Call Detail Record Eavesdropping Vendor Website : http://broadsoft.com/products/broadworks/ Date Released : November 2, 2010...

BroadWorks - Call Detail Record Security Bypass

source: https://www.securityfocus.com/bid/44597/info BroadWorks is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and to obtain sensitive information. Successful exploits will enable the attacker to monitor the incoming and...