6.1
Medium
CVE-2019-1655 A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated,…
Description
A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco WebEx Meetings Server | Versions not published |
References
- 106710 www.securityfocus.com
- 20190123 Cisco Webex Meetings Server Cross-Site Scripting Vulnerability tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco WebEx Meetings Server
The 15 CVEs of Cisco WebEx Meetings Server →
CVE-2021-1525
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote…
4.7
Medium
CVE-2021-1517
A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow…
5.0
Medium
CVE-2021-1221
A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an…
4.1
Medium
CVE-2021-1311
A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow…
5.4
Medium