CVE-2025-20211: Cisco BroadWorks, XSS

Описание

Оригинално описание

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Засегнати продукти

• Cisco Cisco BroadWorks: RI.2021.02; RI.2021.08; RI.2021.09; RI.2021.10; RI.2021.11; RI.2021.12; RI.2022.02; RI.2022.03; RI.2022.06; RI.2022.05; RI.2022.04; RI.2022.07; RI.2022.08; RI.2022.09; RI.2022.10; RI.2022.12; RI.2023.01; RI.2023.02; RI.2023.03; RI.2023.04; RI.2023.05; RI.2023.07; RI.2023.08; RI.2023.09; RI.2023.10; 22.0; 23.0; 24.0; 25.0; RI.2020.09; RI.2023.11; RI.2023.12; RI.2024.01; RI.2024.02; RI.2024.03; RI.2024.04; RI.2024.05; RI.2024.06; RI.2024.07; RI.2024.08; RI.2024.09; 26.0; RI.2024.10; RI.2024.11; RI.2024.12

Вид слабост

• CWE-79 XSS

История

Други уязвимости в Cisco Cisco BroadWorks

• 6.5CVE-2026-76438
• 7.5CVE-2026-20320
• 4.8CVE-2025-20307
• 7.5CVE-2025-20165
• 5.4CVE-2022-20948

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-20211
• https://nvd.nist.gov/vuln/detail/CVE-2025-20211
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-xss-GDPgJ58P