Description (CNA)
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco BroadWorks | affected RI.2021.02; affected RI.2021.08; affected RI.2021.09; affected RI.2021.10; affected RI.2021.11; affected RI.2021.12; affected RI.2022.02; affected RI.2022.03; affected RI.2022.06; affected RI.2022.05; affected RI.2022.04; affected RI.2022.07; affected RI.2022.08; affected RI.2022.09; affected RI.2022.10; affected RI.2022.12; affected RI.2023.01; affected RI.2023.02; affected RI.2023.03; affected RI.2023.04; affected RI.2023.05; affected RI.2023.07; affected RI.2023.08; affected RI.2023.09; affected RI.2023.10; affected 22.0; affected 23.0; affected 24.0; affected 25.0; affected RI.2020.09; affected RI.2023.11; affected RI.2023.12; affected RI.2024.01; affected RI.2024.02; affected RI.2024.03; affected RI.2024.04; affected RI.2024.05; affected RI.2024.06; affected RI.2024.07; affected RI.2024.08; affected RI.2024.09; affected 26.0; affected RI.2024.10; affected RI.2024.11; affected RI.2024.12 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.