CVE-2020-3501

Cisco Webex Meetings Desktop App has CVE-2020-3501 describing information disclosure due to improper input validation of parameters returned from a website. An authenticated, remote attacker could lure a user to a crafted URL to access restricted information from other Webex users. Multiple sourc...

CVE-2020-3502 Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

CVE-2020-3502 Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

CVE-2020-3502

Cisco Webex Meetings Desktop App contains information disclosure vulnerabilities in its user interface due to improper input validation of parameters returned from a website. An authenticated remote attacker could lure a user via a crafted URL to extract restricted information from other Webex us...

Cisco Webex Meetings Scheduled Meeting Template Deletion (cisco-sa-webex-smtdelete-gJDurOgR)

According to its self-reported version, Cisco Webex Meetings is affected by a vulnerability in the scheduled meeting template feature due to insufficient authorization enforcement for requests to delete scheduled meeting templates. An authenticated, remote attacker can exploit this, by sending a...

Cisco Webex Meetings Scheduled Meeting Template Creation (cisco-sa-webex-smtcreate-YmuD5Sk)

According to its self-reported version, Cisco Webex Meetings is affected by a vulnerability in certain web pages due to improper checks on parameter values within affected pages. An unauthenticated, remote attacker can exploit this, by persuading a user to follow a crafted link that is designed t...

Cisco Webex Meetings Reflected XSS (cisco-sa-webex-mttngs-xss-3VbdxDuF)

According to its self-reported version, Cisco Webex Meetings is prior to 40.6.0. It is, therefore, affected by a Reflected Cross-Site Scripting XSS vulnerability. An unauthenticated, remote attacker can exploit this vulnerability by persuading a user to click a malicious link. A successful exploi...

Cisco Webex Meetings Scheduled Meeting Template Creation (cisco-sa-webex-smtcreate-YmuD5Sk)

According to its self-reported version, Cisco Webex Meetings is affected by a vulnerability in the scheduled meeting template feature due to insufficient authorization enforcement for the creation of scheduled meeting templates. An authenticated, remote attacker can exploit this, by sending a...

Cisco Webex Meetings User Email Address Information Disclosure (cisco-sa-webex-mAkmV4qc)

According to its self-reported version, Cisco Webex Meetings is affected by an information disclosure vulnerability due to improper access restrictions on users who are added within user contacts. An authenticated, remote attacker with a legitimate user account can exploit this, by sending...

Cisco Webex Meetings Token Handling Unauthorized Access (cisco-sa-webex-token-zPvEjKN)

According to its self-reported version, Cisco Webex Meetings is affected by an authorization bypass vulnerability due to improper handling of authentication tokens. An unauthenticated, remote attacker can exploit this, by sending specially crafted requests, to gain the privileges of another...

Cisco Webex Meetings Desktop App Input Validation Error Vulnerability (CNVD-2020-45577)

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. An input validation error vulnerability exists in the user interface of the Cisco Webex Meetings Desktop App versions prior to 39.5.24, 40.4.6, and 40.6, which arises from...

Cisco Webex Meetings Information Disclosure Vulnerability (CNVD-2020-44860)

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An information disclosure vulnerability exists in the Contacts feature in Cisco Webex Meetings versions prior to 40.7.0, which stems from the program failing to perform proper access control when a user is added to a us...

Cisco Webex Meetings Desktop App Input Validation Error Vulnerability (CNVD-2020-45578)

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. An input validation error vulnerability exists in the user interface of the Cisco Webex Meetings Desktop App versions prior to 39.5.24, 40.4.6, and 40.6, which arises from...

Cisco Webex Meetings Access Control Error Vulnerability (CNVD-2020-45576)

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An access control error vulnerability exists in the meeting scheduling template feature in Cisco?Webex Meetings versions prior to 40.7.0. An attacker could exploit this vulnerability by sending a specially crafted reque...

Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability

Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A scheduled meeting template creation vulnerability exists in Cisco Webex Meetings versions prior to 40.7.0. The vulnerability stems from insufficient execution of authorization for scheduled meeting template creation...

Cisco Webex Meetings Cross-Site Scripting Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A cross-site scripting vulnerability exists in the web management interface in Cisco Webex Meetings versions prior to T40.6.0, which stems from the program failing to adequately validate user-submitted input. The...

Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

Cisco Webex Meetings User Email Address Information Disclosure Vulnerability

A vulnerability in the contacts feature of Cisco Webex Meetings could allow an authenticated, remote attacker with a legitimate user account to access sensitive information. The vulnerability is due to improper access restrictions on users who are added within user contacts. An attacker on one...

Cisco Webex Meetings Scheduled Meeting Template Deletion Vulnerability

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to delete a scheduled meeting template that belongs to another user in their organization. The vulnerability is due to insufficient authorization enforcement for request...

Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to create a scheduled meeting template that would belong to another user in their organization. The vulnerability is due to insufficient authorization enforcement for th...