6.5
Medium
CVE-2020-3131 A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the…
Description
A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the client to crash, resulting in a denial of service (DoS) condition. The attacker needs a valid developer account to exploit this vulnerability. The vulnerability is due to insufficient input validation when processing received adaptive cards. The attacker could exploit this vulnerability by sending an adaptive card with malicious content to an existing user of the Cisco Webex Teams client for Windows. A successful exploit could allow the attacker to cause the targeted user's client to crash continuously. This vulnerability was introduced in Cisco Webex Teams client for Windows Release 3.0.13131.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Webex Teams | 3.0.13131 | No fix stated |
References
Timeline
- Published
- Last modified
Other CVEs of Cisco Webex Teams
The 14 CVEs of Cisco Webex Teams →
CVE-2025-20236
A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to…
8.8
High
CVE-2020-26067
A vulnerability in the web-based interface of Cisco Webex Teams could allow an authenticated, remote attacker to…
5.4
Medium
CVE-2024-20396
A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain…
5.3
Medium
CVE-2024-20395
A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent…
6.4
Medium