cisco-sa-20190206-webex-injection: Cisco Webex Meetings Online Content Injection Vulnerability
First published: Wed Feb 06 2019(Updated: )
A vulnerability in Cisco Webex Meetings Online could allow an unauthenticated, remote attacker to inject arbitrary text into a user’s browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious URL. A successful exploit could allow the attacker to inject arbitrary text into the user’s browser. The attacker could use the content injection to conduct spoofing attacks. Cisco has released software updates to address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-webex-injection
Credit: Prasenjit Kanti Paul.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Meetings |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190206-webex-injection?
The severity of cisco-sa-20190206-webex-injection is classified as high due to the potential for remote code execution.
How do I fix cisco-sa-20190206-webex-injection?
To fix cisco-sa-20190206-webex-injection, ensure that you are using the latest version of Cisco Webex Meetings Online.
What are the risks associated with cisco-sa-20190206-webex-injection?
The risks associated with cisco-sa-20190206-webex-injection include the potential for an attacker to inject arbitrary text into a user's browser, leading to phishing or malware downloads.
Who is affected by cisco-sa-20190206-webex-injection?
Users of Cisco Webex Meetings Online are affected by cisco-sa-20190206-webex-injection.
What does cisco-sa-20190206-webex-injection exploit require?
cisco-sa-20190206-webex-injection requires an attacker to convince a targeted user to view malicious content.
- agent/last-modified-date
- agent/type
- agent/event
- collector/cisco-advisory
- source/Cisco
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/title
- agent/description
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco webex meetings