2 matches found
EUVD-2026-62944
In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user...
4.3CVSS5.3AI score
SaveExploits0References2
CVE-2026-76383
In RSA SecurID Authentication Manager app for Splunk SOAR versions below 1.0.5, the enable_token and revoke_token actions expose the sensitive token_serial parameter in cleartext because it is not marked as a password-type parameter. A user with action-execution privileges can view the serial in ...
4.3CVSS5.3AI score
SaveExploits0References1
20