CVE-2023-20076

CVE-2023-20076 affects Cisco IOx Application Hosting Environment. The flaw arises from incomplete sanitization of parameters in an activation payload, allowing an authenticated, remote attacker to execute arbitrary commands as root on the underlying host OS. The issue is exploitable by deploying/...

CVE-2022-20724

CVE-2022-20724 is a race condition vulnerability in Cisco IOx Application Hosting Environment affecting multiple Cisco platforms. The issue can allow an unauthenticated remote attacker to bypass authentication and impersonate another authenticated user session. The condition arises from timing/sy...

CVE-2022-20725

Cisco IOx Application Hosting Environment on multiple Cisco platforms contains CVE-2022-20725, a cross-site scripting vulnerability in the web-based Local Manager interface. The issue arises from insufficient sanitization/validation of parameters and inputs in the IOx hosting environment (alongsi...

CVE-2022-20727

Cisco IOx Application Hosting Environment vulnerability CVE-2022-20727 involves an in-application privilege-escalation flaw. The authenticated, local attacker can exploit improper input validation to modify application content while loading and gain root privileges on the underlying host OS. Affe...

CVE-2022-20726

The CVE-2022-20726 issue concerns Cisco IOx Application Hosting Environment across multiple Cisco platforms. The connected sources provide concrete details: a denial-of-service vulnerability in the IOx Web server is caused by insufficient error handling of socket operations, permitting an unauthe...