Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting (XSS) attack or a frame hijacking attack against a user of the web interface. For more information about these vulnerabilities, see the Details section of this advisory.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-frmhijck-kO3wmkuS | Vendor Advisory |
Configurations
History
27 Jun 2023, 18:27
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1021 |
12 Aug 2022, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cisco:webex_meetings:-:*:*:*:*:*:*:* | |
| CWE | CWE-20 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Cisco
Cisco webex Meetings |
|
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-frmhijck-kO3wmkuS - Vendor Advisory |
10 Aug 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting (XSS) attack or a frame hijacking attack against a user of the web interface. For more information about these vulnerabilities, see the Details section of this advisory. |
10 Aug 2022, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-10 09:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-20852
Mitre link : CVE-2022-20852
CVE.ORG link : CVE-2022-20852
JSON object : View
Products Affected
cisco
- webex_meetings
CWE
CWE-1021
Improper Restriction of Rendered UI Layers or Frames