CVE:CVE-2023-20204
CNNVD:CNNVD-202308-132
Cisco BroadWorks CommPilot是美国思科（Cisco）公司的一个运营商级统一通信软件平台，针对性能和规模进行了优化。BroadWorks 由服务提供商托管，可在任何类型的有线或无线网络架构上部署来自通用网络平台的云呼叫。
Cisco BroadWorks CommPilot Application Software存在安全漏洞，该漏洞源于基于Web的管理界面中存在跨站脚本（XSS）漏洞。攻击者可利用该漏洞在受影响的界面行任意脚本代码或访问敏感信息。
solution:Upgrade cisco broadworks_application_delivery_platform to a higher version than ri.2023.06,and avoid the version (,ri.2023.06); Upgrade cisco broadworks_application_server to a higher version than 23.0.2023.08,2023.06,24.0.2023.08,and avoid the version (,23.0.2023.08),(,2023.06),[24.0,24.0.2023.08); Upgrade cisco broadworks_xtended_services_platform to a higher version than 23.0.2023.08,and avoid the version (,23.0.2023.08)