Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:cx_cloud_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCx Cloud Agent (6a93847b-1df0-5756-abd2-4a77c4c9c25f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20044 vulnerable 2026-06-08 05:52:38.372017 Details available
MEDIUM (6.7)
A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device.
Published: 2023-01-19T01:37:06.676Z
Updated: 2024-11-21T21:40:09.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20043 vulnerable 2026-06-08 05:52:38.370252 Details available
MEDIUM (6.7)
A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device.
Published: 2023-01-19T01:36:37.287Z
Updated: 2024-08-02T08:57:35.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22965 vulnerable 2026-06-08 05:40:55.746704 Details available
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Published: 2022-04-01T22:17:30.000Z
Updated: 2025-10-21T23:15:42.792Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.