CVE-2018-0356

Summary : CVE-2018-0356 affects Cisco WebEx’s web framework with insufficient input validation on HTTP GET/POST parameters, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against users of the affected web interface. An attacker can trick a user into fo...

CVE-2017-12368

The CVE-2017-12368 entry covers a vulnerability in Cisco WebEx Network Recording Player for ARF/WRF files that enables remote code execution. The flaw is triggered when a user opens a malicious ARF or WRF file delivered via email or a URL, potentially leading to arbitrary code execution on the ta...

CVE-2017-12371

CVE-2017-12371 is a remote code execution flaw in Cisco WebEx Network Recording Player caused by parsing flaws in ARF/WRF files. ZDI advisories describe ARF/WRF processing issues (uninitialized memory, heap-based/buffer overflows) that allow code execution when a user opens a crafted file (e.g., ...

CVE-2026-20233

Cisco Webex Meetings web UI vulnerable to cross-site scripting (XSS) due to insufficient input validation. Exploitation requires a user to follow a malicious link, enabling arbitrary script execution in the target’s browser and potential access to browser-based information. Affected: web-based us...

CVE-2021-40128

CVE-2021-40128 concerns Cisco Webex Meetings. Affected component: account activation feature. Root cause: insufficient validation of user-supplied parameters, allowing an unauthenticated attacker to cause an activation email with a tampered link to an attacker-controlled domain. Impact: potential...

CVE-2025-20247

Cisco Webex is affected by CVE-2025-20247, a cross-site scripting (XSS) vulnerability caused by improper filtering of user input. An unauthenticated, remote attacker can lure a user to a malicious link, potentially executing script in the victim’s context. The issue impacts Cisco Webex’s handling...

CVE-2015-6384

CVE-2015-6384 (Cisco WebEx Meetings for Android) affects WebEx Meetings for Android before version 8.5.1. The root cause is improper initialization of custom application permissions, which allows an attacker to bypass intended access restrictions via a crafted application. The vulnerability can b...

CVE-2017-12369

CVE-2017-12369 is a Cisco WebEx Network Recording Player out-of-bounds vulnerability affecting ARF/WRF playback. A remote attacker can send a malicious ARF/WRF file (via email or URL) and persuade a user to open it, potentially crashing the player and, in some cases, enabling arbitrary code execu...

CVE-2019-1677

Summary: CVE-2019-1677 is a cross-site scripting vulnerability in Cisco Webex Meetings for Android. An unauthenticated, local attacker could exploit insufficient validation of input parameters by sending a crafted intent, allowing script execution in the Webex app context. Affected versions: prio...

CVE-2021-34743

Cisco Webex Software is affected by a CSRF (cross-site request forgery) vulnerability that can allow an unauthenticated, remote attacker to authorize an external application to access a user’s account without consent. The issue arises from improper validation of CSRF tokens, and an attacker must ...

CVE-2025-20246

CVE-2025-20246 – Cisco Webex XSS vulnerability : The connected sources confirm a cross-site scripting flaw in Cisco Webex caused by improper filtering of user input, exploitable when a user clicks a malicious link. The CVE entry notes unauthenticated, remote access with network attack vector and ...

CVE-2020-27126

Cisco Webex Meetings API contains an XSS vulnerability due to improper validation of user input to the API. An unauthenticated remote attacker can entice a targeted user to follow a crafted link that submits malicious input, potentially exposing browser-based information. Affected: Cisco Webex Me...

CVE-2020-3501

Cisco Webex Meetings Desktop App has CVE-2020-3501 describing information disclosure due to improper input validation of parameters returned from a website. An authenticated, remote attacker could lure a user to a crafted URL to access restricted information from other Webex users. Multiple sourc...

CVE-2023-20134

Cisco Webex Meetings Web UI contains multiple vulnerabilities that enable an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings via the web interface. The issue stems from vulnerabilities in the Web UI’s handling of input t...

CVE-2025-20250

Cisco Webex contains a cross-site scripting (XSS) vulnerability due to improper filtering of user-supplied input. An unauthenticated, remote attacker can entice a user to click a malicious link, potentially enabling XSS against the targeted user. The vulnerability is reflected in multiple sources...

CVE-2020-3502

Cisco Webex Meetings Desktop App contains information disclosure vulnerabilities in its user interface due to improper input validation of parameters returned from a website. An authenticated remote attacker could lure a user via a crafted URL to extract restricted information from other Webex us...

CVE-2017-12370

Cisco WebEx Network Recording Player/WRF ARF processing vulnerabilities (CVE-2017-12370) enable heap-based buffer overflow leading to remote code execution. A remote attacker can lure a user to open a malicious ARF/WRF file (via email/URL); user interaction is required. Affected: WebEx Recorder a...

CVE-2025-20291

CVE-2025-20291 (Cisco Webex Meetings URL Redirect) : A vulnerability in Cisco Webex Meetings arises from insufficient validation of URLs in a meeting-join URL, enabling an unauthenticated, remote attacker to redirect a targeted user to a site controlled by the attacker. The issue is mitigated by ...

CVE-2025-20328

CVE-2025-20328 affects Cisco Webex Meetings’ user profile component. The issue stems from insufficient validation of user-supplied input, enabling an authenticated, low-privilege attacker to deliver a crafted link that could execute cross-site scripting (XSS) against a targeted user in the web in...