CVE-2023-20216

Cisco BroadWorks has a local-privilege-escalation vulnerability (CVE-2023-20216) due to incorrect implementation of user role permissions. An authenticated attacker with BWORKS or BWSUPERADMIN privileges can issue crafted commands to gain root-level access on any BroadWorks server type. The flaw ...

CVE-2023-20019

CVE-2023-20019 describes a cross-site scripting (XSS) vulnerability in the web-based management interfaces of Cisco BroadWorks Application Delivery Platform, Application Server, and Xtended Services Platform. The issue arises from improper validation of user-supplied input, which could let an una...

CVE-2023-20204

Cisco BroadWorks CommPilot Application Software exposes a cross-site scripting (XSS) vulnerability in its web-based management interface. It stems from improper validation of user input, exploitable when a user is persuaded to click a crafted link, potentially allowing arbitrary script execution ...

CVE-2021-1562

CVE-2021-1562: Cisco BroadWorks Application Server Information Disclosure involves the XSI-Actions interface. The root cause is improper input validation and authorization of certain commands, enabling an authenticated, remote attacker to access sensitive information on an affected system. Exploi...