Cisco Crosswork Network Controller — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Crosswork Network Controller, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2026-20220 — CVSS 6.3 (medium): A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote…
• CVE-2025-20166 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated…
• CVE-2025-20167 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated…
• CVE-2025-20168 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated…
• CVE-2025-20123 — CVSS 4.8 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote…