// For flags

CVE-2023-20204

 

Severity Score

5.4
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-10-27 CVE Reserved
  • 2023-08-03 CVE Published
  • 2024-08-02 CVE Updated
  • 2024-08-09 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
Broadworks Application Delivery Platform
Search vendor "Cisco" for product "Broadworks Application Delivery Platform"
< ri.2023.06
Search vendor "Cisco" for product "Broadworks Application Delivery Platform" and version " < ri.2023.06"
-
Affected
Cisco
Search vendor "Cisco"
Broadworks Application Server
Search vendor "Cisco" for product "Broadworks Application Server"
< 23.0.2023.08
Search vendor "Cisco" for product "Broadworks Application Server" and version " < 23.0.2023.08"
-
Affected
Cisco
Search vendor "Cisco"
Broadworks Application Server
Search vendor "Cisco" for product "Broadworks Application Server"
< 2023.06
Search vendor "Cisco" for product "Broadworks Application Server" and version " < 2023.06"
release_independent
Affected
Cisco
Search vendor "Cisco"
Broadworks Application Server
Search vendor "Cisco" for product "Broadworks Application Server"
>= 24.0 < 24.0.2023.08
Search vendor "Cisco" for product "Broadworks Application Server" and version " >= 24.0 < 24.0.2023.08"
-
Affected
Cisco
Search vendor "Cisco"
Broadworks Xtended Services Platform
Search vendor "Cisco" for product "Broadworks Xtended Services Platform"
< 23.0.2023.08
Search vendor "Cisco" for product "Broadworks Xtended Services Platform" and version " < 23.0.2023.08"
-
Affected