Cisco Webex Teams

Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability

Cisco Webex Teams Logging Feature Command Execution Vulnerability

A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges. The vulnerability occurs because Cisco Webex Teams does not properly sanitize input. An attacker could exploit the vulnerability by sending a user a malicious link and persuading the user to follow the link. A successful exploit could allow the attacker to execute arbitrary code on the user's system. Cisco Bug IDs: CSCvh66250.

Cisco Webex App Client-Side Remote Code Execution Vulnerability

Cisco Webex Teams Information Disclosure and Modification Vulnerability

Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability

Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability

Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability

Cisco Intelligent Proximity SSL Certificate Validation Vulnerability

Cisco Webex Teams for iOS Arbitrary File Upload Vulnerability

A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media that is stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user.

Cisco Webex Teams Adaptive Cards Denial of Service Vulnerability

A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability exists because the affected application does not safely handle file protocol handlers. An attacker could exploit this vulnerability by persuading a user to follow a link that is designed to cause the application to send requests. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture sensitive information, including credential information, from the requests.

Cisco Webex App for Web Cross-Site Scripting Vulnerability

Cisco Webex Teams Web Interface Cross-Site Scripting Vulnerability

Cisco Webex Meetings App Character Interface Manipulation Vulnerability

Cisco Webex Teams for Windows DLL Hijacking Vulnerability

Cisco Webex Meetings Client for Windows, Webex Meetings Desktop App, and Webex Teams Information Disclosure Vulnerability

Cisco Webex Teams Shared File Manipulation Vulnerability