Cisco Webex Teams代码问题漏洞

Cisco Webex Teams is a software for team collaboration from Cisco USA. The software provides online communication for teams with features such as shared files, digital whiteboards, and video conferencing. A code issue vulnerability exists in multiple Cisco products, which is caused by incorrect...

PT-2021-4743

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player and Cisco Webex Player for Windows and MacOS affected versions not specified Description A vulnerability in the software could allow an attacker to execute arbitrary code on an affected system due to...

PT-2021-7445

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Server affected versions not specified Cisco Webex Meetings affected versions not specified Description The issue is related to the multimedia viewer feature of the software, where unsafe handling of shared content allows ...

Cisco Webex Network Webex Player 缓冲区错误漏洞

Cisco Webex Network Webex Player is a player for playing video conference recordings from Cisco. A buffer error vulnerability exists in Cisco Webex Player, which can be exploited by an attacker to execute arbitrary code on an affected system...

Cisco Webex Network Recording Player 缓冲区错误漏洞

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco. Cisco WebEx Network Recording Player suffers from a buffer error vulnerability that originates from a boundary error when processing ARF and WRF files. A remote attacker could exploit this...

PT-2021-7449

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings and Cisco Webex Meetings Server affected versions not specified Description The issue is related to improper validation of URL paths in the application interface, allowing an unauthenticated, remote attacker to redirect...

PT-2021-5205

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Client affected versions not specified Description The issue is caused by inadequate authorization procedures in the logging mechanisms of the software. This could allow an authenticated, local attacker to access sensitive...

Cisco Webex Meeting Center安全漏洞

Cisco Webex Meeting Center is an online collaborative video conferencing solution from Cisco. A security vulnerability exists in multiple Cisco products that originates in the multimedia viewer feature of Cisco Webex meeting and Cisco Webex meeting Server, which can be exploited by an...

Cisco WebEx Network Recording Player ARF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Cisco Webex Meetings Android Access Control

The vulnerability of Cisco Webex Meetings’ software for Android-related web conferencing solutions is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to modify the avatar of the target user remotely...

Cisco WebEx Meetings XSS

The vulnerability of Cisco WebEx Meetings software relates to the lack of measures taken to eliminate script-related tags on web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2021-1420

A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a user's browser. The vulnerability is due to improper checks on parameter values in affected pages. An attacker could exploit this vulnerability by...

CVE-2021-1467

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings...

CVE-2021-1467

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings...

Authorization

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings...

Design/Logic Flaw

A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a user's browser. The vulnerability is due to improper checks on parameter values in affected pages. An attacker could exploit this vulnerability by...

CVE-2021-1467 Cisco Webex Meetings for Android Avatar Modification Vulnerability

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings...

CVE-2021-1467

CVE-2021-1467 affects Cisco Webex Meetings for Android. The issue stems from improper authorization checks, allowing an authenticated remote actor in the same meeting to modify another user’s avatar by sending a crafted request to the targeted Webex client. Impact is limited to avatar modificatio...

CVE-2021-1467 Cisco Webex Meetings for Android Avatar Modification Vulnerability

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings...

CVE-2021-1420 Cisco Webex Meetings HTML Injection Vulnerability

A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a user's browser. The vulnerability is due to improper checks on parameter values in affected pages. An attacker could exploit this vulnerability by...