Advisories · Technology

Cisco BroadWorks.

Every CVE that names Cisco BroadWorks among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76438 CVE record

CVSS 6.5 Medium

Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
- Cisco BroadWorks
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-20320 CVE record

CVSS 7.5 High

XML external entity injection in Cisco BroadWorks
- Cisco BroadWorks
- XML external entities (XXE)
Not analysed yet 19 Aug 2026
CVE-2025-20307 CVE record

CVSS 4.8 Medium

Cisco BroadWorks Application Delivery Platform Cross-Site Scripting Vulnerability
- Cisco BroadWorks
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2025
CVE-2025-20211 CVE record

CVSS 6.1 Medium

Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability
- Cisco BroadWorks
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2025
CVE-2025-20165 CVE record

CVSS 7.5 High

Cisco BroadWorks SIP Denial of Service Vulnerability
- Cisco BroadWorks
- Denial of service
Not analysed yet 22 Jan 2025
CVE-2022-20948 CVE record

CVSS 5.4 Medium

Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability
- Cisco BroadWorks
- Cross-site scripting (XSS)
Not analysed yet 15 Nov 2024
CVE-2023-20125 CVE record

CVSS 8.6 High

Cisco BroadWorks Network Server TCP Denial of Service Vulnerability
- Cisco BroadWorks
- Denial of service
Not analysed yet 15 Nov 2024
CVE-2024-20270 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco BroadWorks
- Cisco BroadWorks
- Cross-site scripting (XSS)
Not analysed yet 17 Jan 2024
CVE-2023-20238 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper authentication in Cisco BroadWorks
- Cisco BroadWorks
- Authentication bypass
Not analysed yet 6 Sept 2023
CVE-2023-20216 CVE record

CVSS 4.4 Medium

Improper privilege management in Cisco BroadWorks
- Cisco BroadWorks
- Privilege escalation
Not analysed yet 3 Aug 2023
CVE-2023-20204 CVE record

CVSS 5.4 Medium

Cross-site scripting in Cisco BroadWorks
- Cisco BroadWorks
- Cross-site scripting (XSS)
Not analysed yet 3 Aug 2023
CVE-2023-20210 CVE record

CVSS 6.0 Medium

Execution with unnecessary privileges in Cisco BroadWorks
- Cisco BroadWorks
- Privilege escalation
Not analysed yet 12 Jul 2023
CVE-2023-20019 CVE record

CVSS 6.1 Medium

Cross-site scripting in Cisco BroadWorks
- Cisco BroadWorks
- Cross-site scripting (XSS)
Not analysed yet 19 Jan 2023
CVE-2023-20020 CVE record

CVSS 8.6 High

Infinite loop in Cisco BroadWorks
- Cisco BroadWorks
- Denial of service
Not analysed yet 19 Jan 2023
CVE-2022-20958 CVE record

CVSS 8.3 High

Path traversal in Cisco BroadWorks
- Cisco BroadWorks
- Path traversal
Not analysed yet 3 Nov 2022
CVE-2022-20951 CVE record

CVSS 7.7 High

Server-side request forgery in Cisco BroadWorks
- Cisco BroadWorks
- Server-side request forgery (SSRF)
Not analysed yet 3 Nov 2022
CVE-2022-20869 CVE record

CVSS 6.1 Medium

Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability
- Cisco BroadWorks
- Cross-site scripting (XSS)
Not analysed yet 10 Aug 2022
CVE-2021-34786 CVE record

CVSS 6.5 Medium

Cisco BroadWorks CommPilot Application Software Vulnerabilities
- Cisco BroadWorks
- CWE-620
Not analysed yet 9 Sept 2021
CVE-2021-34785 CVE record

CVSS 6.5 Medium

Cisco BroadWorks CommPilot Application Software Vulnerabilities
- Cisco BroadWorks
- CWE-620
Not analysed yet 9 Sept 2021
CVE-2021-1562 CVE record

CVSS 4.3 Medium

Cisco BroadWorks Application Server Information Disclosure Vulnerability
- Cisco BroadWorks
- Information disclosure
Not analysed yet 8 Jul 2021
CVE-2021-1530 CVE record

CVSS 5.4 Medium

Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability
- Cisco BroadWorks
- XML external entities (XXE)
Not analysed yet 6 May 2021