Product by Cisco
Cisco Crosswork Network Change Automation
6 known vulnerabilities in Cisco Crosswork Network Change Automation (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 74 other products | 10.0 | |
| Medium | CVE-2026-20220 | Cisco Crosswork Network Controller Remote Code Execution Vulnerability | 6.3 | |
| Medium | CVE-2025-20166 | Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability | 5.4 | |
| Medium | CVE-2025-20167 | Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability | 5.4 | |
| Medium | CVE-2025-20168 | Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability | 5.4 | |
| Medium | CVE-2025-20123 | Cisco Crosswork Network Controller Stored Cross-Site Scripting Vulnerability | 4.8 |
News
- Cisco Crosswork Network Controller Server-Side Template Injection Vulnerabilitycisco-psirt
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert