CVE-2020-3263: Improper Input Validation

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could exploit this vulnerability by...

CVE-2020-3361: Improper Authentication

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could...

Cisco Webex Meetings and WebEx Meetings Server Authorization Issues Vulnerability

Cisco WebEx Meetings Server CWMS and Cisco Webex Meetings are both products of Cisco Cisco, U.S.A. Cisco WebEx Meetings Server is a multi-functional conferencing solution that includes audio, video, and Web conferencing in the WebEx Meetings program. Cisco Webex Meetings is a video conferencing...

Cisco Webex Meetings Desktop App Input Validation Error Vulnerability

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. An input validation error vulnerability exists in Cisco Webex Meetings Desktop App versions prior to 39.5.12, which arises from the program failing to properly validate use...

Cisco Webex Meetings Desktop App Trust Management Issue Vulnerability

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. A trust management issue vulnerability exists in the software update feature in the Cisco Webex Meetings Desktop App prior to version 39.5.11 Mac, which arises from the...

CVE-2020-3342: Improper Certificate Validation

A vulnerability in the software update feature of Cisco Webex Meetings Desktop App for Mac could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability is due to improper validation of cryptographic protections on files that are downloaded by...

CVE-2020-3347: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

Cisco Releases Multiple Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. The...

Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vulnerability

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could...

Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution Vulnerability

A vulnerability in the software update feature of Cisco Webex Meetings Desktop App for Mac could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability is due to improper validation of cryptographic protections on files that are downloaded by...

Cisco Webex Meetings Desktop App and Webex Meetings Client URL Filtering Arbitrary Program Execution Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App and Cisco Webex Meetings Client could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could...

PT-2020-2959

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App for Windows affected versions not specified Description A vulnerability in the software could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The issue is d...

PT-2020-2866

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App for Mac affected versions not specified Description A vulnerability in the software update feature could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The issue is d...

PT-2020-2940

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App affected versions not specified Description The issue is related to improper validation of input supplied to application URLs, which could allow an unauthenticated, remote attacker to execute programs on an...

PT-2020-2939

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings and Cisco Webex Meetings Server affected versions not specified Cisco Webex Meetings Desktop App affected versions not specified Description The issue is related to improper handling of authentication tokens, which could...

Cisco Webex Network Recording Player and Cisco Webex Player Input Validation Error Vulnerability (CNVD-2020-31990)

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. An input validation error vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player Release prior to 3.0 MR3 Security Patch 2 and prior to 4.0 MR3 for Windows-based...

Cisco Webex Network Recording Player and Cisco Webex Player Input Validation Error Vulnerability (CNVD-2020-31968)

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. An input validation error vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows-based platforms. An attacker can send a malicious ARF or WRF file via ...

CVE-2020-3321

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service DoS condition for the player application on an affected system. The vulnerability exists due to insufficient...

CVE-2020-3319

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service DoS condition for the player application on an affected system. The vulnerability exists due to insufficient...