Lucene search
K

2970 matches found

CNVD
CNVD
added 2023/04/10 12:0 a.m.9 views

Cisco Webex Meetings Arbitrary File Upload Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An arbitrary file upload vulnerability exists in Cisco Webex Meetings, which can be exploited by a remote attacker to submit a special request to upload a malicious file that can be used to execute arbitrary code in the...

6.5CVSS7.7AI score0.00452EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/04/05 11:0 p.m.2 views

CVE-2023-20134

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

6.5CVSS6.7AI score0.00452EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/04/05 11:0 p.m.2 views

CVE-2023-20132

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS6.2AI score0.00446EPSS
Exploits0References2
NVD
NVD
added 2023/04/05 6:15 p.m.17 views

CVE-2023-20132

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS5.5AI score0.00446EPSS
Exploits0References1
NVD
NVD
added 2023/04/05 6:15 p.m.20 views

CVE-2023-20134

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

6.5CVSS5.8AI score0.00452EPSS
Exploits0References1
Prion
Prion
added 2023/04/05 6:15 p.m.22 views

Cross site scripting

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

4.9CVSS5.3AI score0.00446EPSS
Exploits0References1
Prion
Prion
added 2023/04/05 6:15 p.m.17 views

Cross site scripting

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

4CVSS6.2AI score0.00452EPSS
Exploits0References1
Cisco
Cisco
added 2023/04/05 4:0 p.m.33 views

Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details "details" section of...

5.4CVSS5.7AI score0.00452EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/05 12:0 a.m.9 views

CVE-2023-20134 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS6.1AI score0.00452EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.4 views

Cisco Webex Meetings 跨站脚本漏洞

Cisco Webex Meetings is a videoconferencing solution from Cisco USA. A security vulnerability exists in Cisco Webex Meetings. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

5.4CVSS5.7AI score0.00446EPSS
Exploits0References3
CVE
CVE
added 2023/04/05 12:0 a.m.46 views

CVE-2023-20132

Cisco Webex Meetings web UI contains multiple vulnerabilities allowing an authenticated, remote attacker to perform stored cross-site scripting (XSS) and upload arbitrary files as recordings. The root cause is described as input validation issues in the web interface, enabling stored XSS and impr...

5.4CVSS5.5AI score0.00446EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.5 views

Cisco Webex Meetings 代码问题漏洞

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An arbitrary file upload vulnerability exists in Cisco Webex Meetings, which can be exploited by a remote attacker to submit a special request to upload a malicious file that can be used to execute arbitrary code in the...

6.5CVSS7.8AI score0.00452EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/04/05 12:0 a.m.22 views

CVE-2023-20132 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS5.6AI score0.00446EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/05 12:0 a.m.10 views

CVE-2023-20132 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS6.1AI score0.00446EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/04/05 12:0 a.m.21 views

CVE-2023-20134 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS6.4AI score0.00452EPSS
Exploits0References1
CVE
CVE
added 2023/04/05 12:0 a.m.50 views

CVE-2023-20134

Cisco Webex Meetings Web UI contains multiple vulnerabilities that enable an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings via the web interface. The issue stems from vulnerabilities in the Web UI’s handling of input t...

6.5CVSS5.8AI score0.00452EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:0 a.m.1 views

The vulnerability of the file loading function of the Cisco Webex App, which allows a attacker to carry out cross-site scripting attacks

The vulnerability of the file loading function of the Cisco Webex App exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

6.4CVSS5.9AI score0.00481EPSS
Exploits0References3
NVD
NVD
added 2023/03/03 4:15 p.m.15 views

CVE-2023-20104

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.1AI score0.00481EPSS
Exploits0References1
Prion
Prion
added 2023/03/03 4:15 p.m.12 views

Cross site scripting

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

5.8CVSS6AI score0.00481EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/03/03 12:0 a.m.3 views

Cisco Webex 跨站脚本漏洞

Cisco Webex is a suite of videoconferencing and collaboration products from Cisco USA. A cross-site scripting vulnerability exists in the Cisco Webex App that stems from insufficient validation of user-supplied input and a file upload vulnerability that can be exploited by an attacker to conduct...

6.1CVSS5.8AI score0.00481EPSS
Exploits0References3
Rows per page
Query Builder