Cross site scripting

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are...

CVE-2018-0357

Cisco WebEx Web framework vulnerability CVE-2018-0357 enables unauthenticated XSS in the WebEx web interface due to insufficient input validation of HTTP GET/POST parameters. An attacker entices a user to follow a malicious link, allowing arbitrary script/HTML execution in the user’s browser. Roo...

CVE-2018-0356

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are...

CVE-2018-0357

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are...

CVE-2018-0357

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are...

CVE-2018-0356

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are...

CVE-2018-0356

Summary : CVE-2018-0356 affects Cisco WebEx’s web framework with insufficient input validation on HTTP GET/POST parameters, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against users of the affected web interface. An attacker can trick a user into fo...

Cisco WebEx Cross-Site Scripting Vulnerability

Cisco WebEx is the United States Cisco Cisco company's set of Web conferencing tools, the tool can assist off-site office workers to coordinate and collaborate.WebEx services include Web conferencing, telepresence video conferencing and enterprise instant messaging IM. A cross-site scripting...

Cisco WebEx Cross-Site Scripting Vulnerability (CNVD-2018-11321)

Cisco WebEx is the United States Cisco Cisco company's set of Web conferencing tools, the tool can assist off-site office workers to coordinate and collaborate.WebEx services include Web conferencing, telepresence video conferencing and enterprise instant messaging IM. A cross-site scripting...

Cisco WebEx Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are...

Cisco WebEx Cross-Site Scripting Vulnerability

A vulnerability in the web framework of the https://try.webex.com page of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation...

The vulnerability of the recording mechanism in software for Cisco WebEx Business Suite and WebEx Meetings, as well as Cisco WebEx Meetings Server, allows a perpetrator to execute arbitrary code.

The vulnerability of the mechanism for reproducing records in the Advanced Recording Format ARF of Cisco WebEx Business Suite and WebEx Meetings software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a...

Cisco WebEx Recorder and Player WRF File Length Field Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Cisco WebEx Recorder and Player WRF File Length Field Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Cisco WebEx Connect IM Cross-Site Scripting Vulnerability

Cisco WebEx Connect is the United States Cisco Cisco a simultaneous instant messaging, IP telephony, voice, video and web conferencing features such as client software. im is one of the instant messaging component. A cross-site scripting vulnerability exists in Cisco WebEx Connect IM, which stems...

Timely Password-Change Call from Twitter, as Bugs Hit WebEx and GPON routers

The cyber security news cycle is always active, so to help you stay in the loop here’s a selection of incidents that caught our attention over the past week or so involving, among others, Twitter, Cisco and GPON routers. Twitter picks a good day for password-change call As “change your password”...

Multiple Cisco WebEx Network Recording Players Remote Code Execution Vulnerabilities

Cisco WebEx Business Suite meeting sites, WebEx Meetings sites, and WebEx Meetings Server are video conferencing solutions from Cisco.WebEx Network Recording Player for WebEx Network Recording Player for Advanced Recording Format ARF is one of the meeting recording players. An input validation...

Cisco WebEx Business Suite meeting sites, WebEx Meetings sites and WebEx Meetings Server code execution vulnerabilities

Cisco WebEx Business Suite WBS31 client, etc. are video conferencing solutions from Cisco USA.WebEx ARF player is one of the players, which is mainly used to play WebEx recorded files in ARF format. An input validation vulnerability exists in WebEx ARF player in multiple Cisco products. A remote...

Cisco WebEx Business Suite meeting sites and WebEx Meetings sites WebEx Recording Format Player information disclosure vulnerability

Cisco WebEx Business Suite meeting sites and WebEx Meetings sites are video conferencing solutions from Cisco.WebEx Recording Format WRF Player is one of the players, which is mainly used to play WRF WebEx Recording Format WRF Player is one of the players, which is mainly used to play the WRF...

Critical Cisco WebEx Bug Allows Remote Code Execution

A critical vulnerability in the recording function of Cisco Systems’ WebEx conferencing platform has been uncovered, allowing for remote code execution. Attackers can use the flaw by convincing users to open a file purporting to be a recording of a past WebEx event. The bug CVE-2018-0264 exists i...