CVE-2022-20951

The CVE-2022-20951 entry affects Cisco BroadWorks CommPilot (web-based management interface). Affects an authenticated, remote attacker via input validation flaws that enable server-side request forgery (SSRF) to access confidential information on the BroadWorks server or other network devices. I...

CVE-2021-1530

CVE-2021-1530 – Cisco BroadWorks Messaging Server XML External Entity (XXE) Injection . Affects Cisco BroadWorks Messaging Server Software; vulnerability arises from improper handling of XXE in XML parsing. An authenticated, remote attacker could retrieve local files or cause a partial DoS. Publi...