CVE-2025-20246: XSS
A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20246?
CVE-2025-20246 has a medium severity rating due to its potential to allow cross-site scripting (XSS) attacks.
Who is affected by CVE-2025-20246?
CVE-2025-20246 affects users of Cisco Webex, particularly those who may click on malicious links.
How do I fix CVE-2025-20246?
To mitigate CVE-2025-20246, ensure you are using the latest version of Cisco Webex that includes patches for this vulnerability.
What is the main risk associated with CVE-2025-20246?
The main risk associated with CVE-2025-20246 is the potential for attackers to execute malicious scripts in users' browsers.
Can CVE-2025-20246 be exploited without user interaction?
No, CVE-2025-20246 requires user interaction, specifically persuading users to click on a malicious link.