Lucene search
+L

3634 matches found

CNNVD
CNNVD
•added 2023/04/05 12:00 a.m.•21 views

Cisco Webex Meetings 代码问题漏洞

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An arbitrary file upload vulnerability exists in Cisco Webex Meetings, which can be exploited by a remote attacker to submit a special request to upload a malicious file that can be used to execute arbitrary code in the...

6.5CVSS7.8AI score0.00452EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/04/05 12:00 a.m.•5 views

PT-2023-2965

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings affected versions not specified Description The issue is related to insufficient input validation in the web interface of Cisco Webex Meetings. This could allow an authenticated, remote attacker to conduct a stored...

6.5CVSS0.00452EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/04/05 12:00 a.m.•39 views

CVE-2023-20134 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS6.4AI score0.00452EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/04/05 12:00 a.m.•47 views

CVE-2023-20132 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS5.6AI score0.00446EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/04/05 12:00 a.m.•16 views

CVE-2023-20132 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS6.1AI score0.00446EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/05 12:00 a.m.•7 views

CVE-2023-20132: Improper Input Validation

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS5.9AI score0.00446EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/05 12:00 a.m.•4 views

CVE-2023-20134: Improper Input Validation

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/04/05 12:00 a.m.•18 views

Cisco Webex Meetings 跨站脚本漏洞

Cisco Webex Meetings is a videoconferencing solution from Cisco USA. A security vulnerability exists in Cisco Webex Meetings. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

5.4CVSS5.7AI score0.00446EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/04/05 12:00 a.m.•14 views

CVE-2023-20134 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS6.1AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/05 12:00 a.m.•84 views

CVE-2023-20132

Cisco Webex Meetings web UI contains multiple vulnerabilities allowing an authenticated, remote attacker to perform stored cross-site scripting (XSS) and upload arbitrary files as recordings. The root cause is described as input validation issues in the web interface, enabling stored XSS and impr...

5.4CVSS5.5AI score0.00446EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/04/04 12:00 a.m.•18 views

Cisco Webex App XSS

The vulnerability of the file loading function of the Cisco Webex App exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

6.4CVSS5.9AI score0.00481EPSS
SaveExploits0References3
NVD
NVD
•added 2023/03/03 4:15 p.m.•27 views

CVE-2023-20104

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.1AI score0.00481EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/03 4:15 p.m.•29 views

Cross site scripting

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

5.8CVSS6AI score0.00481EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/03/03 12:00 a.m.•20 views

Cisco Webex 跨站脚本漏洞

Cisco Webex is a suite of videoconferencing and collaboration products from Cisco USA. A cross-site scripting vulnerability exists in the Cisco Webex App that stems from insufficient validation of user-supplied input and a file upload vulnerability that can be exploited by an attacker to conduct...

6.1CVSS5.8AI score0.00481EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/03/03 12:00 a.m.•17 views

CVE-2023-20104 Cisco Webex App for Web Cross-Site Scripting Vulnerability

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.4AI score0.00481EPSS
SaveExploits0References1
CVE
CVE
•added 2023/03/03 12:00 a.m.•109 views

CVE-2023-20104

CVE-2023-20104 affects Cisco Webex App for Web. The vulnerability resides in the file upload functionality where insufficient validation of user-supplied input enables an unauthenticated, remote attacker to trigger cross-site scripting (XSS) by persuading a user to visit a crafted URL after recei...

6.1CVSS6.1AI score0.00481EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/03/03 12:00 a.m.•42 views

CVE-2023-20104 Cisco Webex App for Web Cross-Site Scripting Vulnerability

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.2AI score0.00481EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/03 12:00 a.m.•4 views

CVE-2023-20104: Improper Neutralization of Input During Web Page Generation

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6AI score0.00481EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/03/01 4:00 p.m.•17 views

CVE-2023-20104

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.6AI score0.00481EPSS
SaveExploits0References2
Cisco
Cisco
•added 2023/03/01 4:00 p.m.•75 views

Cisco Webex App for Web Cross-Site Scripting Vulnerability

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

6.1CVSS6.1AI score0.00481EPSS
SaveExploits0References1
Rows per page
Query Builder