CVE-2022-20654: falha de média gravidade em Cisco Webex Meetings
Cisco Webex Meetings Cross-Site Scripting Vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.1epss 0.6%
A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface.
This vulnerability is due to insufficient validation of user-supplied input by the web-based interface of Cisco Webex Meetings. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Cisco · Cisco Webex MeetingsCVEs relacionadas — Cisco Webex Meetings
No mesmo produto, das mais perigosas para as menos.
CVE-2020-3440MEDIUMCisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite VulnerabilityEPSS 2.6%CVE-2020-3194HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilityEPSS 2.0%CVE-2021-1310MEDIUMCisco Webex Meetings Open Redirect VulnerabilityEPSS 1.6%CVE-2020-3142HIGHCisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join VulnerabilityEPSS 1.5%CVE-2019-15960MEDIUMCisco Webex Network Recording Admin Page Privilege Escalation VulnerabilityEPSS 1.1%CVE-2020-3472MEDIUMCisco Webex Meetings User Email Address Information Disclosure VulnerabilityEPSS 1.1%