A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user interface. This is due insufficient validation user-supplied input by affected system. An exploit this injecting malicious code into specific pages interface. A successful execute arbitrary script context or access sensitive, browser-based information. To vulnerability, must have valid administrative credentials.