Lucene search
K

2970 matches found

Tenable Nessus
Tenable Nessus
added 2025/04/18 12:0 a.m.2 views

Cisco Webex App Installed (macOS)

Binary data ciscowebexappmacinstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/04/18 12:0 a.m.8 views

Cisco Webex App Client-Side RCE (cisco-sa-webex-app-client-rce-ufyMMYLC)

According to its self-reported version, Cisco Webex App Client-Side Remote Code Execution is affected by a vulnerability. - A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow...

8.8CVSS6.3AI score0.00908EPSS
Exploits0References3
NCSC
NCSC
added 2025/04/17 7:11 a.m.4 views

Vulnerability fixed in Cisco Webex App

Cisco has fixed a vulnerability in the Cisco Webex App. The vulnerability is in the way the Cisco Webex App handles its custom URL parser. Unauthenticated remote malicious actors can exploit this vulnerability to trick users into downloading arbitrary files, which can lead to unauthorized command...

8.8CVSS7AI score0.00908EPSS
Exploits0References1
OSV
OSV
added 2025/04/16 5:15 p.m.2 views

CVE-2025-20236

A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...

8.8CVSS6.1AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/16 5:15 p.m.3 views

CVE-2025-20236

A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...

8.8CVSS6.1AI score0.00908EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2025/04/16 5:15 p.m.49 views

CVE-2025-20236

A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...

8.8CVSS0.00908EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/16 4:16 p.m.11 views

CVE-2025-20236 Cisco Webex App Client-Side Remote Code Execution Vulnerability

A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...

8.8CVSS0.00908EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/16 4:16 p.m.9 views

CVE-2025-20236 Cisco Webex App Client-Side Remote Code Execution Vulnerability

A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...

8.8CVSS9AI score0.00908EPSS
Exploits0References1
CVE
CVE
added 2025/04/16 4:16 p.m.209 views

CVE-2025-20236

Cisco Webex App is affected by a client-side vulnerability in the custom URL parser that could allow an unauthenticated attacker to convince a user to download arbitrary files, potentially executing commands with the user’s privileges. Root cause: insufficient input validation when processing mee...

8.8CVSS9AI score0.00908EPSS
Exploits0References1Affected Software1
Cisco
Cisco
added 2025/04/16 4:0 p.m.23 views

Cisco Webex App Client-Side Remote Code Execution Vulnerability

A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...

8.8CVSS8AI score0.00908EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.2 views

Cisco Webex 安全漏洞

Cisco Webex is a suite of videoconferencing and collaboration products from Cisco USA. A security vulnerability exists in Cisco Webex that stems from insufficient input validation and could lead to the download of arbitrary files and execution of arbitrary commands...

8.8CVSS6.7AI score0.00908EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/16 12:0 a.m.3 views

PT-2025-16791

Name of the Vulnerable Software and Affected Versions Cisco Webex App versions 44.6 through 44.7 Cisco Webex App affected versions not specified Description A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download...

10CVSS6.1AI score0.00908EPSS
Exploits0References33
Positive Technologies
Positive Technologies
added 2025/04/15 12:0 a.m.2 views

PT-2025-16298 · Cisco · Cisco Webex Meeting Server

Name of the Vulnerable Software and Affected Versions: Cisco WebEx Meeting Server affected versions not specified Description: The issue concerns a Cross-Site Request Forgery CSRF in Cisco WebEx Meeting Server. No information is provided about the estimated number of potentially affected devices...

6.6AI score
Exploits0References3
Cisco
Cisco
added 2025/03/04 4:0 p.m.10 views

Cisco Webex for BroadWorks Credential Exposure Vulnerability

A low-severity vulnerability in Cisco Webex for BroadWorks Release 45.2 could allow an unauthenticated, remote attacker to access data and credentials if unsecure transport is configured for SIP communication. This vulnerability is due to the exposure of sensitive information in the SIP headers. ...

6.8AI score
Exploits0References1
Circl
Circl
added 2024/12/17 9:0 a.m.3 views

CISCO-SA-20190109-WEBEX

creationtimestamp| type| source ---|---|--- 2024-12-17 09:00:36+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113667342774114120...

7.2AI score
Exploits0References1
Circl
Circl
added 2024/12/17 9:0 a.m.2 views

CISCO-SA-20191120-WEBEX

creationtimestamp| type| source ---|---|--- 2024-12-17 09:00:35+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113667342691866661...

7.2AI score
Exploits0References1
Circl
Circl
added 2024/12/17 6:41 a.m.5 views

CISCO-SA-20190123-WEBEX

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:49+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793746125709...

7.2AI score
Exploits0References1
Circl
Circl
added 2024/12/17 6:41 a.m.4 views

CISCO-SA-20181003-WEBEX

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:47+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793613944583...

7.2AI score
Exploits0References1
Circl
Circl
added 2024/12/17 6:41 a.m.3 views

CISCO-SA-20200108-WEBEX

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:05+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666792943846935...

7.2AI score
Exploits0References1
NVD
NVD
added 2024/11/18 5:15 p.m.12 views

CVE-2020-26067

A vulnerability in the web-based interface of Cisco Webex Teams could allow an authenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of usernames. An attacker could exploit this vulnerability by creating an account that contains...

5.4CVSS0.00771EPSS
Exploits0References1
Rows per page
Query Builder