CVE-2025-20211

Summary

CVE-2025-20211 is a cross-site scripting (XSS) vulnerability affecting the web-based management interface of Cisco BroadWorks Application Delivery Platform. An unauthenticated, remote attacker can exploit this issue by crafting malicious links that, if clicked by a user of the interface, could allow the attacker to execute arbitrary script code or gain access to sensitive browser-based information. The root cause of this vulnerability lies in the interface's inability to properly validate user-supplied input. Successful exploitation may lead to significant security implications for affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.