cisco-sa-broadworks-xss-6syj82Ju: Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Stored Cross-Site Scripting Vulnerability

Published Jan 10, 2024

Updated

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the

Affected Software

2 affected components

Cisco BroadWorks Application Delivery Platform

Cisco Broadworks Xtended Services Platform

Event History

Jan 10, 2024

Advisory Published

via Cisco·04:00 PM

Data Sourced

via Cisco·04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2024-20270

Frequently Asked Questions

What is the severity of cisco-sa-broadworks-xss-6syj82Ju?

The severity of cisco-sa-broadworks-xss-6syj82Ju is considered high due to the potential for stored cross-site scripting attacks.

How do I fix cisco-sa-broadworks-xss-6syj82Ju?

To fix cisco-sa-broadworks-xss-6syj82Ju, you should apply the latest security patches recommended by Cisco for the affected software.

Who is affected by cisco-sa-broadworks-xss-6syj82Ju?

Users of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform are affected by cisco-sa-broadworks-xss-6syj82Ju.

What type of attack is possible with cisco-sa-broadworks-xss-6syj82Ju?

cisco-sa-broadworks-xss-6syj82Ju allows for a stored cross-site scripting (XSS) attack by authenticated, remote attackers.

Is authentication required to exploit cisco-sa-broadworks-xss-6syj82Ju?

Yes, authentication is required for an attacker to exploit cisco-sa-broadworks-xss-6syj82Ju.