Lucene search
+L

2992 matches found

Cvelist
Cvelist
added 2020/11/18 5:41 p.m.31 views

CVE-2020-3419 Cisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appearing on the participant list. This vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacke...

6.5CVSS9.3AI score0.01765EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/18 5:41 p.m.84 views

CVE-2020-3419

CVE-2020-3419 affects Cisco Webex Meetings and Cisco Webex Meetings Server. The root cause is improper handling of authentication tokens, allowing an unauthenticated, remote attacker to join a Webex meeting without appearing on the participant list. Exploitation requires access to join links and ...

9.1CVSS7.2AI score0.01765EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/18 5:40 p.m.29 views

CVE-2020-27126 Cisco Webex Meetings API Cross-Site Scripting Vulnerability

A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supplied input to an application programmatic interface API within Cisco Webex Meetings. An attacker...

6.1CVSS6.2AI score0.01021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/11/18 5:40 p.m.10 views

CVE-2020-27126 Cisco Webex Meetings API Cross-Site Scripting Vulnerability

A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supplied input to an application programmatic interface API within Cisco Webex Meetings. An attacker...

6.1CVSS6.2AI score0.01021EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/18 5:40 p.m.60 views

CVE-2020-27126

Cisco Webex Meetings API contains an XSS vulnerability due to improper validation of user input to the API. An unauthenticated remote attacker can entice a targeted user to follow a crafted link that submits malicious input, potentially exposing browser-based information. Affected: Cisco Webex Me...

6.1CVSS6.2AI score0.01021EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
added 2020/11/18 4:00 p.m.50 views

Cisco Webex Meetings API Cross-Site Scripting Vulnerability

A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supplied input to an application programmatic interface API within Cisco Webex Meetings. An attacker...

6.1CVSS6.3AI score0.01021EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/11/18 4:00 p.m.74 views

Cisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby. This vulnerability is due to insufficient protection of sensitive participant information. An attacker could exploit...

5.3CVSS0.3AI score0.01565EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/11/18 4:00 p.m.4 views

CVE-2020-27126

A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supplied input to an application programmatic interface API within Cisco Webex Meetings. An attacker...

6.1CVSS5.2AI score0.01021EPSS
SaveExploits0References2
Cisco
Cisco
added 2020/11/18 4:00 p.m.104 views

Cisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appearing on the participant list. This vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacke...

6.5CVSS0.6AI score0.01765EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/11/18 4:00 p.m.62 views

Cisco Webex Meetings and Cisco Webex Meetings Server Unauthorized Audio Information Exposure Vulnerability

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from an active Webex session. The vulnerability is due to a synchronization issue between meeting and media services on a...

6.5CVSS1.3AI score0.01756EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/11/18 12:00 a.m.11 views

Cisco Webex Meetings Security Vulnerability

Cisco Webex Meetings is a videoconferencing solution from Cisco. A security vulnerability exists in Cisco Webex Meetings and Cisco Webex Meetings Server, which stems from the mishandling of authentication tokens on the Webex website. An attacker could exploit the vulnerability to join a Webex...

9.1CVSS7.3AI score0.01765EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2020/11/18 12:00 a.m.11 views

Cisco Webex Meetings Input Validation Error Vulnerability

Cisco Webex Meetings is a video conferencing solution from Cisco. A security vulnerability exists in Cisco Webex Meetings and Cisco Webex Meetings Server that results from inadequate protection of sensitive participant information. An attacker could exploit the vulnerability to view sensitive...

5.3CVSS6.1AI score0.01565EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/18 12:00 a.m.11 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from the operation beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS7.9AI score0.02615EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2020/11/18 12:00 a.m.11 views

Cisco Webex Meetings Input Validation Error Vulnerability

Cisco Webex Meetings is a videoconferencing solution from Cisco. A security vulnerability exists in Cisco Webex Meetings and Cisco Webex Meetings Server, which results from synchronization issues between meetings and media services on vulnerable Webex websites. An attacker could exploit the...

6.5CVSS6.6AI score0.01756EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2020/11/18 12:00 a.m.12 views

Cisco Webex Meetings 跨站脚本漏洞

Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A cross-site scripting vulnerability exists in the API in Cisco Webex Meetings. The vulnerability stems from improper validation of user input provided to the application programming interface API. An attacker could...

6.1CVSS6.2AI score0.01021EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/18 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco Webex Teams collaboration software allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Webex Teams software interface relates to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00771EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.7 views

The vulnerability of the Cisco Webex Meetings Desktop App’s software lies in the incorrect path name limitation, which allows a malicious actor to execute arbitrary code.

The vulnerability of the Cisco Webex Meetings Desktop App software-related web conferencing software is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.3CVSS7.5AI score0.0041EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.9 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from the operation beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS7.9AI score0.02748EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.9 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from the operation beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.02537EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/11/13 12:00 a.m.51 views

Cisco Webex Meetings Arbitrary Code Execution Vulnerabilities (cisco-sa-webex-nbr-NOS6FQ24) (deprecated)

This plugin has been deprecated as it's a duplicate of cisco-sa-webex-nbr-NOS6FQ24.nasl plugin ID 142880 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/03/19. Deprecated by cisco-sa-webex-nbr-NOS6FQ24.nasl include'compat.inc'; if description scriptid142879; scriptversion"1.7";...

0.8AI score0.02748EPSS
SaveExploits0References9
Rows per page
Query Builder