KB-2268 Information about the Cisco IOS XE Software (CVE-2023-20198 & CVE-2023-20273)

Kevin Kleinegger — Wed, 01 Nov 2023 21:40:09 GMT

Current Revision posted to Appian Knowledge Base by Kevin Kleinegger on 11/1/2023 9:40:09 PM

On 27-Oct-2023, CISA released a security advisory for all organizations utilizing Cisco’s Internetworking Operating System (IOS) XE Software Web User Interface (UI).

Upon assessing the Appian platform against all details of the CVEs (CVE-2023-20198 and CVE-2023-20273), we can confirm that the Appian platform is not impacted by the vulnerability described in the security advisory. We will continue to monitor the situation and provide any updates as appropriate.

Additional Notes:

The following CVEs were released with additional information on the scope of the vulnerability:

CVE-2023-20198 - (Vulnerability in the web UI feature of Cisco IOS XE Software)
CVE-2023-20273 - (Vulnerability in the web UI feature of Cisco IOS XE Software)

Supporting Documentation:

Affected Versions

This article applies to all supported versions of Appian.

Last reviewed: October 31, 2023

Tags: Security

DRAFT SP-9355 Information about the Cisco IOS XE Software (CVE-2023-20198 & CVE-2023-20273)

Kevin Kleinegger — Wed, 01 Nov 2023 21:38:39 GMT

Revision 1 posted to Appian Knowledge Base by Kevin Kleinegger on 11/1/2023 9:38:39 PM