CVE-2026-20320

Published Aug 19, 2026

Last updated 2 hours ago

Exploit known CVSS high 7.5

Overview

Description: A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a crafted XML message to the Open Client Interface – Provisioning (OCI-P) service. A successful exploit could allow the attacker to view sensitive files from the filesystem with the privileges of the Cisco BroadWorks user.
Source: psirt@cisco.com
NVD status: Analyzed
Products: broadworks_application_delivery_platform, broadworks_application_server, broadworks_profile_server, broadworks_xtended_services_platform

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
Exploit added on: Nov 10, 2026
Exploit action due: Nov 24, 2026
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weaknesses

psirt@cisco.com: CWE-611

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:broadworks_application_delivery_platform:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "642652DB-982D-4EAC-8241-05123D621B78",
            "versionEndExcluding": "ri.2026.07",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:cisco:broadworks_application_server:*:*:*:*:release_independent:*:*:*",
            "matchCriteriaId": "36D4F82F-4377-4564-B29B-2407268516A2",
            "versionEndExcluding": "2026.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:cisco:broadworks_profile_server:*:*:*:*:release_independent:*:*:*",
            "matchCriteriaId": "7D599E22-8EE5-4BC3-8444-7643F1C1AD4B",
            "versionEndExcluding": "2026.07",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:cisco:broadworks_xtended_services_platform:*:*:*:*:release_independent:*:*:*",
            "matchCriteriaId": "2F17FFA8-A16C-4051-B21A-103F63DDD080",
            "versionEndExcluding": "2026.07",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.•CVE-2024-20270

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

Related CVEs

References