Cross-Site Scripting Vulnerability in Cisco BroadWorks Application Delivery Platform

CVE-2025-20211

Summary

A cross-site scripting vulnerability exists in the web-based management interface of Cisco BroadWorks Application Delivery Platform. This vulnerability arises from inadequate validation of user-supplied input, enabling an unauthenticated remote attacker to trick users into clicking specially crafted links. Successfully exploiting this vulnerability may allow the attacker to execute arbitrary script code within the context of the affected interface and potentially gain access to sensitive browser-based information. Organizations using this platform should prioritize mitigation measures to safeguard against such attacks.

References