CVE-2021-1536: Uncontrolled Search Path Element

A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this...

PT-2021-4688

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App for Windows affected versions not specified Cisco Webex Meetings Server affected versions not specified Cisco Webex Network Recording Player for Windows affected versions not specified Cisco Webex Teams for...

PT-2021-2166

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App and Webex Productivity Tools affected versions not specified Description The issue is related to errors in processing requests in the Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows,...

CVE-2021-1372: Exposure of Sensitive Information Through Data Queries

A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An...

CVE-2020-3588: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...

Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched

Cisco has disclosed a zero-day vulnerability – for which there is not yet a patch – in the Windows, macOS and Linux versions of its AnyConnect Secure Mobility Client Software. While Cisco said it is not aware of any exploits in the wild for the vulnerability, it said Proof-of-Concept PoC exploit...

PT-2020-4639

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App for Windows affected versions not specified Description A vulnerability in virtualization channel messaging could allow a local attacker to execute arbitrary code on a targeted system. This issue occurs when th...

CVE-2020-3541: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to gain access to sensitive information. The vulnerability is due to unsafe loggin...

PT-2020-3849

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Client for Windows versions affected versions not specified Cisco Webex Meetings Desktop App for Windows versions affected versions not specified Cisco Webex Teams for Windows versions affected versions not specified...

CVE-2020-3440: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...

Vulnerability fixed in Cisco Webex Meetings

A vulnerability has been fixed in the Cisco Webex Meetings Desktop App for Windows. The vulnerability allows a malicious party to to overwrite files on the end user's system. Cisco has released updates to fix the vulnerability. More information can be found on the page below:...

PT-2020-3769

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Desktop App for Windows affected versions not specified Description: The issue is related to improper validation of URL parameters sent from a website to the application, allowing an unauthenticated, remote attacker to...

CVE-2020-3501: Improper Input Validation

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

CVE-2020-3502: Improper Input Validation

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

Cisco Webex Meetings Desktop App Input Validation Error Vulnerability (CNVD-2020-45577)

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. An input validation error vulnerability exists in the user interface of the Cisco Webex Meetings Desktop App versions prior to 39.5.24, 40.4.6, and 40.6, which arises from...

PT-2020-4222

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Desktop App affected versions not specified Cisco Webex Meetings Server affected versions not specified Description: The issue is related to improper input validation of parameters returned to the application from a...

PT-2020-4223

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Desktop App affected versions not specified Cisco Webex Meetings Server affected versions not specified Description: The issue is related to improper input validation of parameters returned to the application from a...

CVE-2020-3263 Cisco Webex Meetings Desktop App URL Filtering Arbitrary Program Execution Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could exploit this vulnerability by...

CVE-2020-3263: Improper Input Validation

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could exploit this vulnerability by...

CVE-2020-3342: Improper Certificate Validation

A vulnerability in the software update feature of Cisco Webex Meetings Desktop App for Mac could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability is due to improper validation of cryptographic protections on files that are downloaded by...