Lucene search
K

2970 matches found

Vulnrichment
Vulnrichment
added 2023/03/03 12:0 a.m.13 views

CVE-2023-20104 Cisco Webex App for Web Cross-Site Scripting Vulnerability

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.4AI score0.00481EPSS
Exploits0References1
CVE
CVE
added 2023/03/03 12:0 a.m.82 views

CVE-2023-20104

CVE-2023-20104 affects Cisco Webex App for Web. The vulnerability resides in the file upload functionality where insufficient validation of user-supplied input enables an unauthenticated, remote attacker to trigger cross-site scripting (XSS) by persuading a user to visit a crafted URL after recei...

6.1CVSS6.1AI score0.00481EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/03 12:0 a.m.21 views

CVE-2023-20104 Cisco Webex App for Web Cross-Site Scripting Vulnerability

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.2AI score0.00481EPSS
Exploits0References1
Cisco
Cisco
added 2023/03/01 4:0 p.m.37 views

Cisco Webex App for Web Cross-Site Scripting Vulnerability

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.1AI score0.00481EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/03/01 4:0 p.m.2 views

CVE-2023-20104

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.6AI score0.00481EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/03/01 12:0 a.m.3 views

PT-2023-2107 · Cisco · Cisco Webex App For Web

Name of the Vulnerable Software and Affected Versions: Cisco Webex App for Web affected versions not specified Description: The issue is related to the file upload functionality of the Cisco Webex App for Web, where insufficient validation of user-supplied input allows an unauthenticated, remote...

6.4CVSS6.1AI score0.00481EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:31 a.m.3 views

SUSE CVE-2014-0691

Cisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it easier for remote attackers to bypass authentication and join arbitrary meetings without a password, aka Bug ID CSCuc79643...

7.3CVSS7.2AI score0.0102EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/02/03 12:0 a.m.3 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Webex Room Phone and Cisco Webex Share HDMI adapters relates to memory release errors, allowing an attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Webex Room Phone and Cisco Webex Share HDMI adapters is related to memory release errors. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted LLDP packets...

6.5CVSS6.6AI score0.00296EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2023/01/20 7:15 a.m.1 views

CVE-2023-20047

A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient resource...

6.5CVSS6.7AI score0.00296EPSS
Exploits0References1
NVD
NVD
added 2023/01/20 7:15 a.m.14 views

CVE-2023-20047

A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient resource...

6.5CVSS6.5AI score0.00296EPSS
Exploits0References1
Prion
Prion
added 2023/01/20 7:15 a.m.14 views

Design/Logic Flaw

A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient resource...

3.3CVSS6.5AI score0.00296EPSS
Exploits0References1Affected Software3
Cvelist
Cvelist
added 2023/01/19 1:36 a.m.17 views

CVE-2023-20047

A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient resource...

6.5CVSS6.7AI score0.00296EPSS
Exploits0References1
CVE
CVE
added 2023/01/19 1:36 a.m.85 views

CVE-2023-20047

CVE-2023-20047 affects Cisco Webex Room Phone and Cisco Webex Share with an LLDP memory/resource allocation flaw. An unauthenticated, adjacent attacker can send crafted LLDP traffic to exhaust memory, crash the LLDP process, and potentially interrupt inbound/outbound calling if LLDP is the only p...

6.5CVSS6.5AI score0.00296EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/01/12 12:0 a.m.2 views

Cisco Webex 安全漏洞

Cisco Webex is a suite of videoconferencing and collaboration products from Cisco USA. A security vulnerability exists in Cisco Webex Room Phone that stems from an under-allocation of resources, resulting in a denial of service...

6.5CVSS6.5AI score0.00296EPSS
Exploits0References3
Cisco
Cisco
added 2023/01/11 4:0 p.m.50 views

Cisco Webex Room Phone and Cisco Webex Share Link Layer Discovery Protocol Memory Leak Vulnerability

A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient resource...

6.5CVSS6.5AI score0.00296EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.2 views

PT-2023-1278 · Cisco · Cisco Webex Room Phone +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Room Phone affected versions not specified Cisco Webex Share affected versions not specified Description: A vulnerability in the Link Layer Discovery Protocol LLDP feature could allow an unauthenticated, adjacent attacker to cause...

6.5CVSS6.5AI score0.00296EPSS
Exploits0References4
Citrix
Citrix
added 2022/11/17 12:0 a.m.6 views

Unable to Launch the Webex and Teams Meeting from Citrix Secure Web on Android

Unable to Launch the Webex or Teams Meeting from Citrix Secure Web on Android Error message "Blocked. Access to this site is restricted by admin policy" or blank page...

6.9AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.3 views

PT-2022-6730 · Cisco · Cisco Webex Meetings

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in Webex Events classic programs, email templates, and survey questions, allowing an authenticated, remot...

5.5CVSS5.2AI score0.00517EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.4 views

The vulnerability of the software interfaces of Cisco Webex Meetings Server and Cisco Webex Meetings allows a perpetrator to redirect users to any arbitrary URL address.

The vulnerability of Cisco Webex Meetings Server and Cisco Webex Meetings interfaces relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...

6.4CVSS6.4AI score0.00783EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.3 views

The vulnerability of the multimedia viewing function of Cisco Webex Meetings Server and Cisco Webex Meetings allows attackers to circumvent existing security restrictions.

The vulnerability of the multimedia viewing function in Cisco Webex Meetings Server and Cisco Webex Meetings relates to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions remotely...

5CVSS5.5AI score0.00825EPSS
Exploits0References2
Rows per page
Query Builder