Aller au contenu
6.1 Moyenne

CVE-2020-27126 A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct…

Description

A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supplied input to an application programmatic interface (API) within Cisco Webex Meetings. An attacker could exploit this vulnerability by convincing a targeted user to follow a link designed to submit malicious input to the API used by Cisco Webex Meetings. A successful exploit could allow the attacker to conduct cross-site scripting attacks and potentially gain access to sensitive browser-based information from the system of a targeted user.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Webex Meetings Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification
Les 46 CVE de Cisco Webex Meetings →
Suivre cette CVE