PT-2020-1954

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Client for MacOS affected versions not specified Description A vulnerability in the multicast DNS mDNS protocol configuration could allow an unauthenticated adjacent attacker to obtain sensitive information about the devic...

PT-2020-1740

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Proximity solution affected versions not specified Cisco Webex video devices affected versions not specified Cisco collaboration endpoints affected versions not specified Description A vulnerability in the SSL implementation...

CVE-2020-3155: Improper Certificate Validation

A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices and Cisco collaboration endpoints if the products meet the conditions described in the Vulnerable...

PT-2020-1727

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description The issue is due to insufficient validation of certain elements...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

Server side request forgery (ssrf)

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

CVE-2020-7796

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 is vulnerable to SSRF when the WebEx zimlet is installed and the zimlet JSP is enabled. The issue is documented in CVE-2020-7796 and is corroborated by multiple sources (NVD, Nuclei template, Red Hat advisory, CNVD, osv.dev, etc.). Impact des...

CVE-2020-7796: Server-Side Request Forgery (SSRF)

Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled...

PT-2020-19795

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions prior to 8.8.15 Patch 7 Description The software is susceptible to a Server-Side Request Forgery SSRF attack when the WebEx zimlet is installed and the zimlet JSP is enabled. A recent surge in the...

Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A security vulnerability exists in Cisco Webex Meetings Suite and Cisco Webex Meetings Online. The vulnerability is caused by accidentally exposing meeting information in a specific meeting join stream in a mobile...

Cisco Webex Teams for Windows Adaptive Cards Denial of Service (cisco-sa-webex-cards-dos-FWzNcXPq)

According to its self-reported version, Cisco Webex Teams is affected by a denial of service vulnerability. An authenticated, remote attacker can exploit this, by crafting a malicious adaptive card file and sending it to a Webex Teams client user, causing the client to crash continuously. Please...

The vulnerability of the Cisco Webex Teams software for Windows, related to uncontrolled resource consumption, allows a malicious individual to cause service interruptions.

The vulnerability of the Cisco Webex Teams software for Windows involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability in the web interface of software for Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center allows a perpetrator to disclose protected information.

The vulnerability of the software web interfaces for Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center is related to the absence of CAPTCHA protection. Exploiting this vulnerability can allow a malicious actor to disclose protected...

The vulnerability in the web interface of the Cisco Webex Video Mesh software allows a malicious actor to execute arbitrary commands.

The vulnerability of the Cisco Webex Video Mesh software control web interface is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2020-3131

A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the client to crash, resulting in a denial of service DoS condition. The attacker needs a valid developer account to exploit this vulnerability. The vulnerability is due to...

CVE-2020-3142

A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the meeting password. The connection attempt must initiate from a Webex mobile application for either iO...