Broadworks Application Server vulnerabilities

2 known vulnerabilities in Broadworks Application Server from Cisco. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco BroadWorks Improper Restriction of XML External Entity Reference Exploited

  CVE-2026-20320Aug 19, 2026Cisco

  A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly pa

• 7.8 High severity

  Cisco BroadWorks: Incorrect Permission Assignment for Critical Resource

  CVE-2023-20216Aug 3, 2023Cisco

  A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role