Known vulnerabilities in BroadWorks CommPilot Application Software

Vendor: Cisco Systems, Inc
Software: BroadWorks CommPilot Application Software
Software CPE: cpe:2.3:a:cisco_systems:broadworks_commpilot_application_software:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BroadWorks CommPilot Application Software BroadWorks CommPilot Application Software is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20204		 CWE-79 Low
No
No
 - 03.08.2023 SB2023080301
#VU68972 - Server-Side Request Forgery (SSRF)
CVE-2022-20958		 CWE-918 Medium
No
No
 23.0.1075, 24.0.944 04.11.2022 SB2022110424
#VU68971 - Absolute Path Traversal
CVE-2022-20951		 CWE-36 Medium
No
No
 23.0.1075, 24.0.944 04.11.2022 SB2022110424
#VU56422 - Improper Authorization
CVE-2021-34786		 CWE-285 Low
No
No
 22.0.2021.09, 23.0.2021.09, 24.0.2021.09 09.09.2021 SB2021090907
#VU56420 - Permissions, Privileges, and Access Controls
CVE-2021-34785		 CWE-264 Low
No
No
 22.0.2021.09, 23.0.2021.09, 24.0.2021.09 09.09.2021 SB2021090907