#Webex for mac users software#
#Webex for mac users code#

#Webex for mac users software#

An attacker could exploit this vulnerability by convincing a targeted user who is currently authenticated to Cisco Webex Software to follow a link designed to pass malicious input to the Cisco Webex Software application authorization interface. This vulnerability is due to improper validation of cross-site request forgery (CSRF) tokens.

#Webex for mac users code#

A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.Ī vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote attacker to authorize an external application to integrate with and access a user's account without that user's express consent. An attacker could exploit this vulnerability by persuading a user to click a crafted link. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. A successful exploit could allow the attacker to send to any recipient an account activation email that contains a tampered activation link, which could direct the user to an attacker-controlled website.Ī vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the account activation page of Cisco Webex Meetings. This vulnerability is due to insufficient validation of user-supplied parameters. A successful exploit could allow the attacker to inject arbitrary Java code and take arbitrary actions within the Cisco Webex Meetings application.Ī vulnerability in the account activation feature of Cisco Webex Meetings could allow an unauthenticated, remote attacker to send an account activation email with an activation link that points to an arbitrary domain. An attacker could exploit this vulnerability by sending malicious login requests to the Cisco Webex Meetings service. This vulnerability is due to improper deserialization of Java code within login requests. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.Ī vulnerability in the login authorization components of Cisco Webex Meetings could allow an authenticated, remote attacker to inject arbitrary Java code. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. This vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the authentication component of Cisco Webex Meetings. For more information about these vulnerabilities, see the Details section of this advisory.Ī vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting (XSS) attack or a frame hijacking attack against a user of the web interface.

A successful exploit could allow the attacker to modify the display of links or other content within the interface, potentially allowing the attacker to conduct phishing or spoofing attacks.

An attacker could exploit this vulnerability by sending messages within the application interface. This vulnerability exists because the affected software does not properly handle character rendering.

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface.