Broadworks Application Delivery Platform vulnerabilities

3 known vulnerabilities in Broadworks Application Delivery Platform from Cisco. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco BroadWorks Improper Restriction of XML External Entity Reference Exploited

  CVE-2026-20320Aug 19, 2026Cisco

  A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly pa

• 9.8 Critical severity

  Cisco BroadWorks: Improper Authentication

  CVE-2023-20238Sep 6, 2023CiscoEPSS 15.1%

  A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected

• 7.8 High severity

  Cisco BroadWorks: Incorrect Permission Assignment for Critical Resource

  CVE-2023-20216Aug 3, 2023Cisco

  A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role