Lucene search
K

2970 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.4 views

The vulnerability of the mechanisms used by Cisco Webex Meetings Client software for web conference communications allows attackers to disclose protected information.

The vulnerability of the logging mechanisms in the Cisco Webex Meetings Client software arises from deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these mechanisms...

5.5CVSS5.9AI score0.00228EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.2 views

The vulnerability of the Cisco Webex Video Mesh media transfer software arises from the lack of protective measures taken for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Cisco Webex Video Mesh media transfer software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.1CVSS6.2AI score0.0075EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.1 views

The vulnerability of the Cisco Webex Player for Windows and MacOS operating systems stems from insufficient validation of values in Webex recording files, allowing attackers to execute arbitrary code.

The vulnerability of the Cisco Webex Player for Windows and MacOS operating systems is related to insufficient checking of values in Webex recording files. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted WRF Webex Recording Format files...

7.8CVSS7.6AI score0.01024EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/11/18 12:0 a.m.4 views

The vulnerability in the web interface of the Cisco Webex Video Mesh software allows a attacker to redirect users to a malicious web page.

The vulnerability of the Cisco Webex Video Mesh software management web interface is related to the possibility of redirecting users to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to malicious web pages...

6.4CVSS6.3AI score0.00789EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/16 12:0 a.m.1 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows and MacOS operating systems stems from insufficient validation of values in Webex recording files. This allows attackers to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows and MacOS operating systems is related to insufficient checking of values in Webex recording files. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a malicious AR...

7.8CVSS7.6AI score0.01081EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:0 a.m.2 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows and MacOS operating systems stems from insufficient validation of values in Webex recording files. This allows attackers to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows and MacOS operating systems is related to insufficient checking of values in Webex recording files. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a malicious AR...

7.8CVSS7.6AI score0.01024EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/11 12:0 a.m.2 views

The software for Cisco Webex Meetings Server, Cisco Webex Meetings Desktop App, and Cisco Webex Teams – a collaboration tool for Windows operating systems – has vulnerabilities related to errors in the path validation mechanism for dynamically loaded libraries. This allows attackers to execute arbitrary code.

The vulnerability of Cisco Webex Meetings Server, Cisco Webex Meetings Desktop App, and Cisco Webex Teams for Windows operating systems relates to errors in the mechanism for checking paths to dynamically loaded libraries. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.3CVSS7.5AI score0.00326EPSS
Exploits0References3Affected Software3
CNVD
CNVD
added 2021/11/05 12:0 a.m.17 views

Cisco Webex Meetings Input Validation Error Vulnerability

An input validation error vulnerability exists in Cisco Webex Meetings, a video conferencing solution from Cisco, which stems from insufficient validation of user-supplied parameters in the product. An attacker could send an activation email to an increasingly account through this vulnerability...

5.3CVSS4.1AI score0.00955EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/05 12:0 a.m.16 views

Cisco Webex Video Mesh Cross-Site Scripting Vulnerability

Cisco Webex Video Mesh is a software from Cisco, U.S.A. Cisco Webex Video Mesh dynamically finds the best combination of local and cloud conferencing resources. When local resources are sufficient, local meetings stay local. When local resources are exhausted, the conference is expanded to the...

6.1CVSS6AI score0.0075EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/05 12:0 a.m.13 views

Cisco Webex Video Mesh Input Validation Error Vulnerability

Cisco Webex Video Mesh is a software from Cisco, U.S.A. Cisco Webex Video Mesh dynamically finds the best combination of local and cloud conferencing resources. When local resources are sufficient, local meetings stay local. When local resources are exhausted, the conference is expanded to the...

6.1CVSS5.7AI score0.00789EPSS
Exploits0References1
OSV
OSV
added 2021/11/04 4:15 p.m.3 views

CVE-2021-40115

A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker...

6.1CVSS6.6AI score
Exploits0References1
NVD
NVD
added 2021/11/04 4:15 p.m.22 views

CVE-2021-40115

A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker...

6.1CVSS0.0075EPSS
Exploits0References1
NVD
NVD
added 2021/11/04 4:15 p.m.14 views

CVE-2021-40128

A vulnerability in the account activation feature of Cisco Webex Meetings could allow an unauthenticated, remote attacker to send an account activation email with an activation link that points to an arbitrary domain. This vulnerability is due to insufficient validation of user-supplied parameter...

5.3CVSS0.00955EPSS
Exploits0References1
OSV
OSV
added 2021/11/04 4:15 p.m.3 views

CVE-2021-1500

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit th...

6.1CVSS5.8AI score0.00789EPSS
Exploits0References1
NVD
NVD
added 2021/11/04 4:15 p.m.11 views

CVE-2021-1500

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit th...

6.1CVSS0.00789EPSS
Exploits0References1
Prion
Prion
added 2021/11/04 4:15 p.m.15 views

Cross site scripting

A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker...

4.3CVSS5.9AI score0.0075EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2021/11/04 4:15 p.m.17 views

Design/Logic Flaw

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit th...

5.8CVSS6.1AI score0.00789EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2021/11/04 4:15 p.m.16 views

Input validation

A vulnerability in the account activation feature of Cisco Webex Meetings could allow an unauthenticated, remote attacker to send an account activation email with an activation link that points to an arbitrary domain. This vulnerability is due to insufficient validation of user-supplied parameter...

5CVSS5.4AI score0.00955EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2021/11/04 3:40 p.m.9 views

CVE-2021-1500 Cisco Webex Video Mesh Arbitrary Site Redirection Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit th...

5.4CVSS6.7AI score0.00789EPSS
Exploits0References1
CVE
CVE
added 2021/11/04 3:40 p.m.50 views

CVE-2021-1500

Cisco Webex Video Mesh suffers an input validation flaw in the web-based management interface that improperly validates URL parameters in HTTP requests. An unauthenticated, remote attacker could lure a user to click a crafted link and be redirected to a malicious site, enabling phishing scenarios...

6.1CVSS5.8AI score0.00789EPSS
Exploits0References1Affected Software2
Rows per page
Query Builder