Known vulnerabilities in BroadWorks Application Delivery Platform

Known vulnerabilities in BroadWorks Application Delivery Platform

Vendor: Cisco Systems, Inc

Software: BroadWorks Application Delivery Platform

Software CPE: cpe:2.3:a:cisco_systems:broadworks_application_delivery_platform:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU144385 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2026-20320	CWE-611	Medium	No	No	RI.2026.07	19.08.2026	SB20260819138
#VU112129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20307	CWE-79	Low	No	No	RI.2025.05	03.07.2025	SB2025070333
#VU104101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20211	CWE-79	Low	No	No	-	20.02.2025	SB2025022005
#VU85303 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-20270	CWE-79	Low	No	No	-	11.01.2024	SB2024011122
#VU80519 - Improper Authentication CVE-2023-20238	CWE-287	High	No	No	AP.platform.23.0.1075.ap385341, 2023.06_1.333, 2023.07_1.332	07.09.2023	SB2023090721
#VU78886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-20204	CWE-79	Low	No	No	2023.06	03.08.2023	SB2023080301
#VU78442 - Permissions, Privileges, and Access Controls CVE-2023-20216	CWE-264	Low	No	No	Rel_2023.05_1.291	20.07.2023	SB2023072010
#VU78014 - Permissions, Privileges, and Access Controls CVE-2023-20210	CWE-264	Low	No	No	Rel_2023.05_1.290	07.07.2023	SB2023070707
#VU71115 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-20019	CWE-79	Low	No	No	CommPilot-23_2022.11, CommPilot-24_2022.11	12.01.2023	SB2023011217