Cisco Webex Meetings Cross-Site Scripting (XSS) Vulnerability Advisory

Key Information 1. Vulnerability Description: - Vulnerability Type: Cisco Webex Meetings Cross-Site Scripting (XSS) Vulnerability - Affected Scope: Cisco Webex Meetings, which is cloud-based. - Impact Level: Medium (Base 6.1) 2. Vulnerability Details: - Cause: Insufficient validation of user-supplied input by the web-based interface of Cisco Webex Meetings. - Exploitation Method: An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. - Impact: A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. 3. Affected Products: - Affected Product: Cisco Webex Meetings, which is cloud-based. 4. Remediation: - Fixed: Cisco has released software updates that address this vulnerability. - User Action Required: No user action is required. 5. Security Policy: - Security Policy Link: Cisco Security Vulnerability Policy 6. Rating: - Average Rating: 5 stars (0 votes) - User Rating: 5 stars (0 votes) 7. Source: - Reporter: Hatim Chabik 8. URL: - Vulnerability Details Page: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-FmbPu2pe 9. Revision History: - Version: 1.0 - Release Date: 2022-JAN-19 Legal Disclaimer Disclaimer: THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME. Additional Information Related Link: Cisco Security Vulnerability Policy Subscribe to Security Notifications: Subscribe to Cisco Security Notifications Contact Information: Contact Us

Goal Reached Thanks to every supporter — we hit 100%!

Cisco Webex Meetings Cross-Site Scripting (XSS) Vulnerability Advisory