CVE-2025-20247: XSS
A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20247?
The severity of CVE-2025-20247 is considered to be high due to the potential for remote attackers to exploit it.
How do I fix CVE-2025-20247?
To fix CVE-2025-20247, ensure that your Cisco Webex application is updated to the latest version provided by Cisco.
Who is affected by CVE-2025-20247?
CVE-2025-20247 affects all users of Cisco Webex that have not applied the necessary security updates.
What type of attack is associated with CVE-2025-20247?
CVE-2025-20247 is associated with cross-site scripting (XSS) attacks targeting Cisco Webex.
What causes CVE-2025-20247?
CVE-2025-20247 is caused by improper filtering of user-supplied input within the Cisco Webex application.