CVE-2019-1866: Improper Access Control

Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker to affect the integrity of the application. The vulnerability is due to improper validation of host header values. An attacker with a privileged network position, either a...

PT-2019-5352

Name of the Vulnerable Software and Affected Versions Cisco Webex Business Suite versions prior to 39.1.0 Description The issue is due to improper validation of host header values, allowing an unauthenticated, remote attacker to affect the integrity of the application. An attacker with a privileg...

CVE-2019-1680

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

CVE-2019-1680

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

CVE-2019-1680: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

Cisco Webex Business Suite Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in the MyWebex component of Cisco Webex Business Suite. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via a specially crafted URL...

CVE-2018-15461

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convinci...

Cross site scripting

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convinci...

CVE-2018-15461

Cisco Webex Business Suite (MyWebex component) contains a cross-site scripting (XSS) vulnerability due to insufficient input validation. An unauthenticated, remote attacker can lure a user to click a crafted URL, enabling injection of arbitrary web script or HTML. Exploitation relies on social en...

CVE-2018-15461 Cisco Webex Business Suite Cross-Site Scripting Vulnerability

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convinci...

CVE-2018-15461 Cisco Webex Business Suite Cross-Site Scripting Vulnerability

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convinci...

CVE-2018-15461: Improper Neutralization of Input During Web Page Generation

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convinci...

Cisco Webex Business Suite Cross-Site Scripting Vulnerability

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convinci...

PT-2019-1280

Name of the Vulnerable Software and Affected Versions Cisco Webex Business Suite affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the MyWebex component, allowing an unauthenticated, remote attacker to conduct a cross-site...

The vulnerability of the recording mechanism in software for Cisco WebEx Business Suite and WebEx Meetings, as well as Cisco WebEx Meetings Server, allows a perpetrator to execute arbitrary code.

The vulnerability of the mechanism for reproducing records in the Advanced Recording Format ARF of Cisco WebEx Business Suite and WebEx Meetings software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a...

PT-2018-1193

Name of the Vulnerable Software and Affected Versions Cisco WebEx Business Suite versions prior to T31.23.4 Cisco WebEx Business Suite versions prior to T32.12 Cisco WebEx Meetings versions prior to T32.12 Cisco WebEx Meetings Server versions prior to 3.0 Patch 1 Description A vulnerability in th...

PT-2018-8728

Name of the Vulnerable Software and Affected Versions: Cisco WebEx Network Recording Player affected versions not specified Description: A design flaw in the Cisco WebEx Network Recording Player for Advanced Recording Format ARF files could allow an unauthenticated, remote attacker to execute...

CVE-2018-0112: Improper Input Validation

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An...

PT-2018-1192

Name of the Vulnerable Software and Affected Versions Cisco WebEx Business Suite versions prior to T31.23.2 Cisco WebEx Business Suite versions prior to T32.10 Cisco WebEx Meetings versions prior to T32.10 Cisco WebEx Meetings Server versions prior to 2.8 MR2 Description A vulnerability in Cisco...

CVE-2018-0104

A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format ARF files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious A...