CVE-2022-20727

Cisco IOx Application Hosting Environment Vulnerabilities

Published Apr 15, 2022 CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Description
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-25977 Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Sep 16, 2024, 7:30 PM
Reserved
Nov 2, 2021, 12:00 AM
Status
Modified
Published
Apr 15, 2022, 3:15 PM
Modified
Jun 17, 2026, 4:24 AM