What’s Vulnerable › Products

Cisco Crosswork Network Change Automation vulnerabilities

6 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Cisco Crosswork Network Change Automation version is affected

Exploited Cisco Crosswork Network Change Automation vulnerabilities

• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability

Latest Cisco Crosswork Network Change Automation vulnerabilities

• CVE-2026-20220 — Cisco Crosswork Network Controller Remote Code Execution Vulnerability (CVSS 6.3)
• CVE-2025-20168 — Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability (CVSS 5.4)
• CVE-2025-20167 — Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability (CVSS 5.4)
• CVE-2025-20166 — Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability (CVSS 5.4)
• CVE-2025-20123 — Cisco Crosswork Network Controller Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability (CVSS 10.0) — exploited