Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.
History

Wed, 06 Nov 2024 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2022-04-15T14:21:02.732370Z

Updated: 2024-11-06T16:23:50.620Z

Reserved: 2021-11-02T00:00:00

Link: CVE-2022-20725

cve-icon Vulnrichment

Updated: 2024-08-03T02:24:49.219Z

cve-icon NVD

Status : Modified

Published: 2022-04-15T15:15:13.510

Modified: 2023-11-07T03:42:44.517

Link: CVE-2022-20725

cve-icon Redhat

No data.