51 matches found
Server side request forgery (ssrf)
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request forgery SSRF attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input. ...
Cisco BroadWorks CommPilot 代码问题漏洞
Cisco BroadWorks CommPilot is a carrier-grade unified communications software platform optimized for performance and scale from Cisco, U.S.A. BroadWorks is hosted by service providers and enables the deployment of cloud calls from a common network platform on any type of wired or wireless network...
Cisco BroadWorks CommPilot 代码问题漏洞
Cisco BroadWorks CommPilot is a carrier-grade unified communications software platform optimized for performance and scale from Cisco, U.S.A. BroadWorks is hosted by service providers and enables the deployment of cloud calls from a common network platform on any type of wired or wireless network...
CVE-2022-20958
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request forgery SSRF attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input. ...
CVE-2022-20958
The CVE-2022-20958 issue affects Cisco BroadWorks CommPilot Web-based Management Interface. The vulnerability is due to insufficient validation of user-supplied input, enabling an unauthenticated remote attacker to perform a server-side request forgery (SSRF) against the BroadWorks server and oth...
CVE-2022-20951
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to perform a server-side request forgery SSRF attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...
CVE-2022-20951
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to perform a server-side request forgery SSRF attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...
CVE-2022-20951
The CVE-2022-20951 entry affects Cisco BroadWorks CommPilot (web-based management interface). Affects an authenticated, remote attacker via input validation flaws that enable server-side request forgery (SSRF) to access confidential information on the BroadWorks server or other network devices. I...
Cisco BroadWorks CommPilot Application Software Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device or obtain confidential information from the Cisco BroadWorks server and other devices on...
PT-2022-6063 · Cisco · Cisco Broadworks Commpilot
Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to...
PT-2022-5477 · Cisco · Cisco Broadworks Commpilot
Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to...
PT-2022-6769 · Cisco · Cisco Broadworks Xtended Services Platform +3
Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Cisco BroadWorks Application Server AS affected versions not specified Cisco BroadWorks Xtended Services Platform XSP affected versions not specified BroadWorks...
The vulnerability in the web interface of the Cisco BroadWorks CommPilot Application Software allows a hacker to delete arbitrary user accounts.
The vulnerability of the Cisco BroadWorks CommPilot Application Software’s web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to delete arbitrary user accounts remotely...
The vulnerability in the web interface of the Cisco BroadWorks CommPilot Application Software allows a hacker to delete arbitrary user accounts.
The vulnerability of the Cisco BroadWorks CommPilot Application Software’s web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to delete arbitrary user accounts remotely...
CVE-2021-34785
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...
CVE-2021-34786
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...
CVE-2021-34786
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...
CVE-2021-34785
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...
Design/Logic Flaw
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...
Design/Logic Flaw
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...