CVE-2023-20133

A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because of insufficient validation of user-supplied input in Webex Events class...

CVE-2023-20133

A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because of insufficient validation of user-supplied input in Webex Events class...

CVE-2023-20180: Cross-Site Request Forgery (CSRF)

A vulnerability in the web interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web interface on an affected system. An attack...

CVE-2023-20133: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because of insufficient validation of user-supplied input in Webex Events class...

Cisco Webex Meetings 跨站请求伪造漏洞

Cisco Webex Meetings is a video conferencing solution from Cisco. A security vulnerability exists in Cisco Webex Meetings, which stems from a cross-site request forgery vulnerability that allows an attacker to perform arbitrary actions in the affected interface using the privileges of the target...

Cisco Webex Meetings 跨站脚本漏洞

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. Cisco Webex Meetings suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary Web...

Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web UI of Cisco Webex Meetings could allow a remote attacker to conduct stored cross-site scripting XSS or cross-site request forgery CSRF attacks. For more information about these vulnerabilities, see the Details "details" section of this advisory. Cisco has...

PT-2023-3544 · Cisco · Cisco Webex Meetings

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings affected versions not specified Description: A vulnerability in the web interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This is due to...

Webex Meetings File Upload

The vulnerability of Cisco Webex Meetings software’s web interface is related to insufficient verification of data entered by users. Exploiting this vulnerability allows a malicious actor to upload arbitrary files by sending a specially created HTML request...

Cisco Webex Meetings XSS

The vulnerability of Cisco Webex Meetings software’s web interface is related to insufficient verification of data entered by users during a web seminar session. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks using a specially created malicious li...

Cisco Webex Network Recording Player (cisco-sa-webex-player-rCFDeVj2)

The version of Cisco Webex Network Recording Player and Cisco Webex Player installed on the remote host is affected by a memory corruption vulnerability due to insufficient validation of Webex recording files formatted as either Advanced Recording Format ARF or Webex Recording Format WRF. An...

Cisco Webex Meetings Arbitrary File Upload Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An arbitrary file upload vulnerability exists in Cisco Webex Meetings, which can be exploited by a remote attacker to submit a special request to upload a malicious file that can be used to execute arbitrary code in the...

CVE-2023-20134

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

CVE-2023-20132

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

CVE-2023-20132

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

CVE-2023-20134

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

Cross site scripting

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

Cross site scripting

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details "details" section of...

CVE-2023-20134

Cisco Webex Meetings Web UI contains multiple vulnerabilities that enable an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings via the web interface. The issue stems from vulnerabilities in the Web UI’s handling of input t...