Cisco Crosswork, Secure Workload CVEs Patched

Cisco released security updates for Crosswork and Secure Workload addressing nine vulnerabilities — five rated CVSS 10.0 (SQL injection, missing authentication, file-control weakness, improper access control, and improper authentication). Cisco reports no known active exploitation; administrators should inventory affected deployments and upgrade to the listed fixed releases (Crosswork 7.2.1-SP / 2.1.1-SP; Secure Workload 3.10.9.1 / 4.0.4.16) and restrict management interfaces while patching.