Vulnerabilities fixed in Cisco Webex Meetings and Webex Server

🗓️ 03 Jun 2021 00:00:00Reported by NCSCType

Cisco fixes Webex vulnerabilities enabling remote attacks to bypass security, execute code, spoof, or access data.

Reporter	Title	Published	Views	Family All 49
ATTACKERKB	CVE-2021-1525	2 Jun 202116:00	–	attackerkb
ATTACKERKB	CVE-2021-1517	2 Jun 202116:00	–	attackerkb
ATTACKERKB	CVE-2021-1536	2 Jun 202116:00	–	attackerkb
ATTACKERKB	CVE-2021-1544	2 Jun 202116:00	–	attackerkb
BDU FSTEC	The software for Cisco Webex Meetings Server, Cisco Webex Meetings Desktop App, and Cisco Webex Teams – a collaboration tool for Windows operating systems – has vulnerabilities related to errors in the path validation mechanism for dynamically loaded libraries. This allows attackers to execute arbitrary code.	11 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mechanisms used by Cisco Webex Meetings Client software for web conference communications allows attackers to disclose protected information.	13 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the multimedia viewing function of Cisco Webex Meetings Server and Cisco Webex Meetings allows attackers to circumvent existing security restrictions.	20 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software interfaces of Cisco Webex Meetings Server and Cisco Webex Meetings allows a perpetrator to redirect users to any arbitrary URL address.	20 Oct 202200:00	–	bdu_fstec
Cisco	Cisco Webex Meetings Client Software Logging Information Disclosure Vulnerability	2 Jun 202116:00	–	cisco
Cisco	Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability	2 Jun 202116:00	–	cisco

03 Jun 2021 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 26.9

CVSS 3.15.5 - 7.8

EPSS0.00825

SSVC