cisco-sa-20180418-webcon: Cisco WebEx Connect IM Cross-Site Scripting Vulnerability
First published: Wed Apr 18 2018(Updated: )
A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-webcon
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Connect IM |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20180418-webcon?
The severity of cisco-sa-20180418-webcon is critical due to the potential for cross-site scripting (XSS) attacks.
How do I fix cisco-sa-20180418-webcon?
To fix cisco-sa-20180418-webcon, update your Cisco WebEx Connect IM to the latest version that addresses this vulnerability.
What are the potential impacts of cisco-sa-20180418-webcon?
The potential impacts of cisco-sa-20180418-webcon include unauthorized access and the execution of malicious scripts in a user's session.
Who is affected by cisco-sa-20180418-webcon?
Users of Cisco WebEx Connect IM are affected by cisco-sa-20180418-webcon.
Is there a workaround for cisco-sa-20180418-webcon?
There are no known workarounds for cisco-sa-20180418-webcon; upgrading to a patched version is the recommended action.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/title
- agent/references
- agent/severity
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco webex connect im