Cisco patches 15 flaws, including four critical Crosswork bugs

CISCO recently announced patches for 15 vulnerabilities across its products, including critical flaws in Crosswork and Secure Workload, with four vulnerabilities rated as CVSS 10/10 and one at 9.9/10. Key issues include SQL injection, authentication bypasses, and input validation flaws, which can lead to remote code execution and sensitive data exposure. Additionally, updates were made for vulnerabilities in the Open Client Interface of BroadWorks and several other products. Cisco is unaware of any of these vulnerabilities being actively exploited.