cisco-sa-bw-xss-EzqDXqG4: Cisco BroadWorks Application Delivery Platform, Application Server, and Xtended Services Platform Cross-Site Scripting Vulnerability
First published: Wed Jan 11 2023(Updated: )
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform, Cisco BroadWorks Application Server, and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco BroadWorks Application Delivery Platform Device Management | ||
| Cisco Broadworks Application Server Firmware | ||
| Cisco BroadWorks Xtended Services Platform Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-bw-xss-EzqDXqG4?
The severity of cisco-sa-bw-xss-EzqDXqG4 is categorized as high due to its potential for cross-site scripting (XSS) attacks.
How do I fix cisco-sa-bw-xss-EzqDXqG4?
To fix cisco-sa-bw-xss-EzqDXqG4, apply the recommended software updates and patches provided by Cisco.
What systems are affected by cisco-sa-bw-xss-EzqDXqG4?
The affected systems for cisco-sa-bw-xss-EzqDXqG4 include Cisco BroadWorks Application Delivery Platform, BroadWorks Application Server, and BroadWorks Xtended Services Platform.
What type of attack does cisco-sa-bw-xss-EzqDXqG4 allow?
cisco-sa-bw-xss-EzqDXqG4 allows unauthenticated, remote attackers to perform cross-site scripting (XSS) attacks.
Is authentication required to exploit cisco-sa-bw-xss-EzqDXqG4?
No, authentication is not required to exploit cisco-sa-bw-xss-EzqDXqG4, making it a significant security risk.
- collector/cisco-recent
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco broadworks application delivery platform device management
- canonical/cisco broadworks application server firmware
- canonical/cisco broadworks xtended services platform firmware