Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-sxss-fupl-64uHbcm5 | Vendor Advisory |
Configurations
History
11 Apr 2023, 19:50
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 | |
| References | (CISCO) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-sxss-fupl-64uHbcm5 - Vendor Advisory | |
| CPE | cpe:2.3:a:cisco:webex_meetings:-:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Cisco
Cisco webex Meetings |
05 Apr 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-05 18:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-20134
Mitre link : CVE-2023-20134
CVE.ORG link : CVE-2023-20134
JSON object : View
Products Affected
cisco
- webex_meetings