Cisco Webex Meetings Online Content Injection Vulnerability

A vulnerability in Cisco Webex Meetings Online could allow an unauthenticated, remote attacker to inject arbitrary text into a user’s browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious...

Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerabilit...

PT-2019-1383 · Cisco · Webex Meetings

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings versions prior to 11.7.0.236 Description: The issue is due to insufficient validation of application input parameters, allowing an unauthenticated, local attacker to perform a cross-site scripting attack against the...

The vulnerability of the MyWebex software component for Cisco WebEx Business Suite allows attackers to execute cross-site scripting attacks.

The vulnerability of the MyWebex software component for Cisco WebEx Business Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

The vulnerability in the web interface of the Cisco WebEx Meetings Server software allows attackers to execute cross-site scripting attacks.

The vulnerability of the administration web interface of Cisco WebEx Meetings Server software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially crafted link...

The vulnerability of the Cisco Webex Teams collaboration software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command sequence. This allows attackers to execute arbitrary commands.

The vulnerability of the Cisco Webex Teams collaboration software exists because measures are not taken to neutralize the special elements used in the operating system’s command sequence. Exploiting this vulnerability allows an attacker to execute arbitrary commands with privileges of the target...

Cisco WebEx Network Recording Player ARF File Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

PT-2019-1518

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App versions prior to 33.6.6 and 33.9.1 Cisco Webex Productivity Tools versions prior to 33.0.7 Description A vulnerability in the update service could allow an authenticated, local attacker to execute arbitrary...

Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability (CNVD-2019-02749)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A cross-site scripting vulnerability exists in the web-based management interface in Cisco CWMS, which stems from t...

Cisco WebEx Network Recording Player ARF File Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Cisco Webex Teams Cisco Spark URI Handler Remote Command Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Webex Cisco Spark. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handles URIs within...

CVE-2019-1655

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

CVE-2019-1655

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

CVE-2019-1655 Cisco Webex Meetings Server Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

CVE-2019-1655

CVE-2019-1655 affects Cisco Webex Meetings Server, specifically the web-based management interface. The vulnerability stems from insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to induce a user to click a malicious link and execute arbitrary script cod...

CVE-2019-1655 Cisco Webex Meetings Server Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

Cisco Webex Network Recording Player and Webex Player for Windows Buffer Overflow Vulnerability

Cisco Webex Business Suite WBS32 sites, etc. are video conferencing solutions from Cisco USA.Cisco Webex Network Recording Player and Webex Player are among the players used to play video conference recordings. A buffer overflow vulnerability exists in the Windows-based Cisco Webex Network...

Cisco Webex Network Recording Player and Webex Player for Windows Buffer Overflow Vulnerability (CNVD-2019-02788)

Cisco Webex Business Suite WBS32 sites, etc. are video conferencing solutions from Cisco USA.Cisco Webex Network Recording Player and Webex Player are among the players used to play video conference recordings. A buffer overflow vulnerability exists in the Windows-based Cisco Webex Network...

Cisco Webex Teams Operating System Command Injection Vulnerability

Cisco Webex Teams is a team collaboration application from Cisco USA. The program includes features such as video conferencing, group messaging and file sharing. Cisco Webex Teams suffers from an operating system command injection vulnerability. An attacker could exploit this vulnerability by...