Cross-site Scripting Vulnerability in Cisco BroadWorks CommPilot Application Software

CVE-2023-20204

Summary

A vulnerability in the web-based management interface of Cisco's BroadWorks CommPilot Application Software allows authenticated, remote attackers to launch cross-site scripting attacks. This occurs due to inadequate validation of user-supplied inputs, enabling attackers to persuade users to click on crafted links. Upon successful exploitation, attackers can execute arbitrary script code within the context of the affected interface or gain unauthorized access to sensitive, browser-based information. It is crucial for organizations using this software to implement robust security measures to mitigate this risk.

References