CVE-2018-0390: XSS
First published: Wed Jul 18 2018(Updated: )
A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-based) cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software by using the HTTP POST method. An attacker who can submit malicious scripts to the affected user interface element could execute arbitrary script or HTML code in the user's browser in the context of the affected site. Cisco Bug IDs: CSCvj33287.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Meetings Client | =2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0390?
CVE-2018-0390 is rated as a high severity vulnerability due to its potential to enable DOM-based cross-site scripting (XSS) attacks.
How do I fix CVE-2018-0390?
To mitigate CVE-2018-0390, users should upgrade to a patched version of Cisco Webex Meetings Client.
What affects CVE-2018-0390?
CVE-2018-0390 specifically affects version 2.0 of Cisco Webex Meetings Client.
Can CVE-2018-0390 be exploited remotely?
Yes, CVE-2018-0390 can be exploited by an unauthenticated remote attacker.
What type of attack is associated with CVE-2018-0390?
CVE-2018-0390 is associated with a Document Object Model-based (DOM) cross-site scripting (XSS) attack.
- agent/references
- agent/weakness
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco webex meetings client
- version/cisco webex meetings client/2.0