Cisco Cisco BroadWorks

• CVE-2026-76438 Medium 6.5 Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability 0.6%
• CVE-2026-20320 High 7.5 A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. 0.5%
• CVE-2025-20307 Medium 4.8 Cisco BroadWorks Application Delivery Platform Cross-Site Scripting Vulnerability 0.3%
• CVE-2025-20211 Medium 6.1 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability 0.3%
• CVE-2025-20165 High 7.5 Cisco BroadWorks SIP Denial of Service Vulnerability 0.9%
• CVE-2022-20948 Medium 5.4 Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability 0.5%
• CVE-2023-20125 High 8.6 Cisco BroadWorks Network Server TCP Denial of Service Vulnerability 1.0%
• CVE-2024-20270 Medium 4.8 A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an authenticated, remote attacker to 0.4%
• CVE-2023-20238 Critical 10.0 A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attac 15.1%
• CVE-2023-20216 Medium 4.4 A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. Thi 0.2%
• CVE-2023-20204 Medium 5.4 A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack ag 0.4%
• CVE-2023-20210 Medium 6.0 A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validat 0.2%
• CVE-2023-20019 Medium 6.1 A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform, Cisco BroadWorks Application Server, and Cisco BroadWorks Xtended Services Platform could allow 0.6%
• CVE-2023-20020 High 8.6 A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote att 0.9%
• CVE-2022-20958 High 8.3 A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request forgery (SSRF) attack o 1.1%
• CVE-2022-20951 High 7.7 A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to perform a server-side request forgery (SSRF) attack on 2.3%
• CVE-2022-20869 Medium 6.1 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability 0.7%
• CVE-2021-34786 Medium 6.5 Cisco BroadWorks CommPilot Application Software Vulnerabilities 1.0%
• CVE-2021-34785 Medium 6.5 Cisco BroadWorks CommPilot Application Software Vulnerabilities 1.3%
• CVE-2021-1562 Medium 4.3 Cisco BroadWorks Application Server Information Disclosure Vulnerability 0.9%
• CVE-2021-1530 Medium 5.4 Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability 1.1%