Cisco
Cisco Webex Meetings: vulnerabilidades y CVE
Cisco Webex Meetings tiene 70 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 9 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE70
Últimos 12 meses1
Críticas9
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20233 | Media (6.1) | 0.18% | — | 3 jun 2026 | A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in… |
| CVE-2025-20328 | Media (5.4) | 0.22% | — | 3 sept 2025 | A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to conduct a cross-site scripting (XSS) attack against a user of the… |
| CVE-2025-20291 | Media (6.1) | 0.24% | — | 3 sept 2025 | A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this vulnerability in the Cisco… |
| CVE-2025-20215 | Media (5.4) | 0.10% | — | 6 ago 2025 | A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeting-join process in place of an intended targeted user,… |
| CVE-2025-20255 | Media (4.3) | 0.19% | — | 21 may 2025 | A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This vulnerability is due to improper… |
| CVE-2025-20250 | Media (6.1) | 0.30% | — | 21 may 2025 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could… |
| CVE-2025-20247 | Media (6.1) | 0.30% | — | 21 may 2025 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could… |
| CVE-2025-20246 | Media (6.1) | 0.30% | — | 21 may 2025 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could… |
| CVE-2021-1410 | Media (4.3) | 0.83% | — | 18 nov 2024 | A vulnerability in the distribution list feature of Cisco Webex Meetings could allow an authenticated, remote attacker to modify a distribution list that belongs to another user of their organization. The… |
| CVE-2022-20654 | Media (6.1) | 0.59% | — | 15 nov 2024 | A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. This… |
| CVE-2023-20180 | Media (4.3) | 0.39% | — | 7 jul 2023 | A vulnerability in the web interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to… |
| CVE-2023-20133 | Media (5.4) | 0.64% | — | 7 jul 2023 | A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists… |
| CVE-2023-20134 | Media (6.5) | 0.45% | — | 5 abr 2023 | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more… |
| CVE-2023-20132 | Media (5.4) | 0.45% | — | 5 abr 2023 | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more… |
| CVE-2022-20852 | Media (6.5) | 0.50% | — | 10 ago 2022 | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting (XSS) attack or a frame hijacking attack against a user of the web interface. For… |
| CVE-2022-20820 | Media (5.4) | 0.53% | — | 10 ago 2022 | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting (XSS) attack or a frame hijacking attack against a user of the web interface. For… |
| CVE-2022-20778 | Media (6.1) | 0.82% | — | 21 abr 2022 | A vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. This… |
| CVE-2021-40128 | Media (5.3) | 0.99% | — | 4 nov 2021 | A vulnerability in the account activation feature of Cisco Webex Meetings could allow an unauthenticated, remote attacker to send an account activation email with an activation link that points to an arbitrary domain.… |
| CVE-2021-34743 | Alta (7.1) | 0.47% | — | 21 oct 2021 | A vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote attacker to authorize an external application to integrate with and access a user's account without… |
| CVE-2021-1544 | Media (5.5) | 0.23% | — | 4 jun 2021 | A vulnerability in logging mechanisms of Cisco Webex Meetings client software could allow an authenticated, local attacker to gain access to sensitive information. This vulnerability is due to unsafe logging of… |
| CVE-2021-1467 | Media (4.3) | 0.74% | — | 8 abr 2021 | A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could… |
| CVE-2021-1420 | Media (4.7) | 0.92% | — | 8 abr 2021 | A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a user's browser. The vulnerability is due to improper checks on… |
| CVE-2021-1372 | Media (5.5) | 0.42% | — | 17 feb 2021 | A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability… |
| CVE-2021-1351 | Media (6.1) | 0.81% | — | 17 feb 2021 | A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected… |
| CVE-2021-1221 | Media (4.1) | 1.0% | — | 4 feb 2021 | A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The… |
| CVE-2021-1311 | Media (5.4) | 1.3% | — | 13 ene 2021 | A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting. This vulnerability is… |
| CVE-2021-1310 | Media (4.7) | 1.6% | — | 13 ene 2021 | A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page, bypassing the warning mechanism that should… |
| CVE-2020-3441 | Media (5.3) | 1.6% | — | 18 nov 2020 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby. This vulnerability is due to… |
| CVE-2020-27126 | Media (6.1) | 1.0% | — | 18 nov 2020 | A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supplied input to an… |
| CVE-2020-3604 | Alta (7.8) | 2.6% | — | 6 nov 2020 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.