CVE-2022-20725

Cisco IOx Application Hosting Environment on multiple Cisco platforms contains CVE-2022-20725, a cross-site scripting vulnerability in the web-based Local Manager interface. The issue arises from insufficient sanitization/validation of parameters and inputs in the IOx hosting environment (alongsi...

CVE-2022-20727

Cisco IOx Application Hosting Environment vulnerability CVE-2022-20727 involves an in-application privilege-escalation flaw. The authenticated, local attacker can exploit improper input validation to modify application content while loading and gain root privileges on the underlying host OS. Affe...