Cisco Security Updates – 16 November 2023

The addressed vulnerabilities could allow the attacker to bypass security, perform cross-site scripting attacks, gain elevated privileges, or trigger denial of services attacks on the affected products.

Sample of the addressed vulnerabilities:

1. Cisco Identity Services Engine Security Bypass (CVE-2023-20272):

• CVSS: 6.7
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Bypass Security

2. Cisco AppDynamics PHP Agent Privilege Escalation (CVE-2023-20274):

• CVSS: 6.3
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Gain Privileges