Description
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco BroadWorks
Default version status: unknown
RI.2021.02affectedRI.2021.08affectedRI.2021.09affectedRI.2021.10affectedRI.2021.11affectedRI.2021.12affectedRI.2022.02affectedRI.2022.03affectedRI.2022.06affectedRI.2022.05affectedRI.2022.04affectedRI.2022.07affectedRI.2022.08affectedRI.2022.09affectedRI.2022.10affectedRI.2022.12affectedRI.2023.01affectedRI.2023.02affectedRI.2023.03affectedRI.2023.04affectedRI.2023.05affectedRI.2023.07affectedRI.2023.08affectedRI.2023.09affectedRI.2023.10affected22.0affected23.0affected24.0affected25.0affectedRI.2020.09affectedRI.2023.11affectedRI.2023.12affectedRI.2024.01affectedRI.2024.02affectedRI.2024.03affectedRI.2024.04affectedRI.2024.05affectedRI.2024.06affectedRI.2024.07affectedRI.2024.08affectedRI.2024.09affected26.0affectedRI.2024.10affectedRI.2024.11affectedRI.2024.12affected