Total vulnerabilities in the database
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file. This vulnerability is due to improper validation of URL paths in the application interface. An attacker could exploit this vulnerability by persuading a user to follow a specially crafted URL that is designed to cause Cisco Webex Meetings to include a remote file in the web UI. A successful exploit could allow the attacker to cause the application to offer a remote file to a user, which could allow the attacker to conduct further phishing or spoofing attacks.
| Software | From | Fixed in |
|---|---|---|
| cisco / webex_meetings_server | - | 3.0 |
| cisco / webex_meetings_server | 3.0-maintenance_release1 | 3.0-maintenance_release1.x |
| cisco / webex_meetings_server | 3.0 | 3.0.x |
| cisco / webex_meetings_server | 3.0-maintenance_release2 | 3.0-maintenance_release2.x |
| cisco / webex_meetings_server | 3.0-maintenance_release3 | 3.0-maintenance_release3.x |
| cisco / webex_meetings_server | 4.0 | 4.0.x |
| cisco / webex_meetings_server | 4.0-maintenance_release1 | 4.0-maintenance_release1.x |
| cisco / webex_meetings_server | 4.0-maintenance_release2 | 4.0-maintenance_release2.x |
| cisco / webex_meetings_server | 4.0-maintenance_release3 | 4.0-maintenance_release3.x |
| cisco / webex_meetings_server | 4.0-maintenance_release3_security_patch3 | 4.0-maintenance_release3_security_patch3.x |
| cisco / webex_meetings_server | 4.0-maintenance_release3_security_patch4 | 4.0-maintenance_release3_security_patch4.x |
| cisco / webex_meetings_online | 41.3.5 | 41.3.5.x |