CVE-2022-20719CWE-22

Cisco IOx Application Hosting Environment Vulnerabilities

Medium · published April 15, 2022

CVSS v3.1
5.5
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.02701 · 85.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-04-15T14:15Z
EPSS history
Timeline
  • 15 APR 14:15Z
    Cisco IOx Application Hosting Environment Vulnerabilities
    cvelistv5