CVE-2025-20250: XSS
A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20250?
CVE-2025-20250 is considered a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2025-20250?
You can mitigate CVE-2025-20250 by applying the latest security patches provided by Cisco for Cisco Webex.
What is the impact of CVE-2025-20250 on Cisco Webex?
The impact of CVE-2025-20250 on Cisco Webex could allow attackers to execute arbitrary scripts in the context of a user's browser.
Who is affected by CVE-2025-20250?
All users of Cisco Webex are potentially affected by CVE-2025-20250 if they interact with malicious content.
Can CVE-2025-20250 be exploited without authentication?
Yes, CVE-2025-20250 can be exploited by unauthenticated remote attackers through social engineering tactics.