CVE-2022-20778

Summary (CVE-2022-20778) : A vulnerability in the authentication component of Cisco Webex Meetings enables an unauthenticated, remote attacker to perform a Cross-Site Scripting (XSS) attack against users of the web-based interface due to insufficient validation of user input. An attacker can lure...

CVE-2022-20852

The CVE-2022-20852 entry covers Cisco Webex Meetings Web Interface vulnerabilities that allow remote XSS or frame hijacking via input handling flaws in the Webex web interface. Connected sources corroborate issues originating from insufficient input validation on web pages, enabling cross-site sc...

CVE-2021-1420

CVE-2021-1420 refers to an HTML injection vulnerability in Cisco Webex Meetings pages. The issue arises from improper validation/checks of parameter values, allowing an unauthenticated, remote attacker to persuade a user to follow a crafted link that injects HTML into an affected parameter. This ...

CVE-2022-20820

Cisco CVE-2022-20820 affects the Cisco Webex Meetings Web Interface. The issues are web‑interface input/validation problems enabling remote XSS or frame hijacking. Impact per available data is low confidentiality and integrity impact, with no availability impact; attacker must lure a user to inte...

CVE-2018-0104

The CVE-2018-0104 issue concerns Cisco WebEx Network Recording Player for ARF files. A remote attacker can trigger arbitrary code execution by sending a user a link or email attachment containing a malicious ARF file and convincing them to open it. Affected products include Cisco WebEx Business S...

CVE-2018-0103

CVE-2018-0103 describes a buffer overflow in Cisco WebEx Network Recording Player when parsing ARF files, permitting arbitrary code execution with local access (per NVD) and potentially remote exploitation via crafted ARF content (per ZDI). Affected: Cisco WebEx Network Recording Player and relat...

CVE-2025-20255

CVE-2025-20255 affects Cisco Webex Meetings, specifically the client join services. The issue arises from improper handling of malicious HTTP requests, enabling HTTP cache poisoning where stored HTTP responses could be manipulated and cause the Webex Meetings service to return incorrect responses...

CVE-2021-40128

CVE-2021-40128 concerns Cisco Webex Meetings. Affected component: account activation feature. Root cause: insufficient validation of user-supplied parameters, allowing an unauthenticated attacker to cause an activation email with a tampered link to an attacker-controlled domain. Impact: potential...

CVE-2021-34743

Cisco Webex Software is affected by a CSRF (cross-site request forgery) vulnerability that can allow an unauthenticated, remote attacker to authorize an external application to access a user’s account without consent. The issue arises from improper validation of CSRF tokens, and an attacker must ...

CVE-2025-20246

CVE-2025-20246 – Cisco Webex XSS vulnerability : The connected sources confirm a cross-site scripting flaw in Cisco Webex caused by improper filtering of user input, exploitable when a user clicks a malicious link. The CVE entry notes unauthenticated, remote access with network attack vector and ...

CVE-2025-20247

Cisco Webex is affected by CVE-2025-20247, a cross-site scripting (XSS) vulnerability caused by improper filtering of user input. An unauthenticated, remote attacker can lure a user to a malicious link, potentially executing script in the victim’s context. The issue impacts Cisco Webex’s handling...

CVE-2023-20132

Cisco Webex Meetings web UI contains multiple vulnerabilities allowing an authenticated, remote attacker to perform stored cross-site scripting (XSS) and upload arbitrary files as recordings. The root cause is described as input validation issues in the web interface, enabling stored XSS and impr...

CVE-2023-20134

Cisco Webex Meetings Web UI contains multiple vulnerabilities that enable an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings via the web interface. The issue stems from vulnerabilities in the Web UI’s handling of input t...

CVE-2025-20250

Cisco Webex contains a cross-site scripting (XSS) vulnerability due to improper filtering of user-supplied input. An unauthenticated, remote attacker can entice a user to click a malicious link, potentially enabling XSS against the targeted user. The vulnerability is reflected in multiple sources...

CVE-2025-20328

CVE-2025-20328 affects Cisco Webex Meetings’ user profile component. The issue stems from insufficient validation of user-supplied input, enabling an authenticated, low-privilege attacker to deliver a crafted link that could execute cross-site scripting (XSS) against a targeted user in the web in...