Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2770▲ 14 respecto a la semana anterior
Críticas / altas1475▲ 292 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)68▼ 447 respecto a la semana anterior
339 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Media (4.3) | 0.19% | — | Cisco Webex APP FOR Splunk SoarAISplunk SoarAI | 19/8/2026 | 20/8/2026 | In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user interface. The… | |
| Analizada | Media (4.3) | 0.20% | — | Cisco Webex WEB APP | 17/6/2026 | 22/6/2026 | A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed this vulnerability in the Cisco Webex App, and no customer action is needed. This vulnerability existed due to improper input validation… | |
| Analizada | Media (6.1) | 0.18% | — | Cisco Webex Meetings | 3/6/2026 | 22/7/2026 | A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed. This vulnerability existed because of… | |
| Pendiente de análisis | Crítica (9.8) | 0.52% | — | Cisco Webex ServicesAI | 15/4/2026 | 17/6/2026 | A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. This vulnerability existed because of improper certificate validation. Prior to this vulnerability being addressed, an… | |
| Analizada | Media (6.1) | 0.22% | — | Cisco Webex Contact Center | 15/4/2026 | 1/7/2026 | A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has addressed this vulnerability in the Cisco Webex Contact Center service, and no customer action is needed. This vulnerability existed… | |
| Analizada | Media (6.1) | 0.24% | — | Cisco Webex | 4/3/2026 | 17/6/2026 | A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability, and no customer action is needed. This vulnerability was due to improper filtering of user-supplied input. Prior to this vulnerability being… | |
| Analizada | Media (5.4) | 0.22% | — | Cisco Webex Meetings | 3/9/2025 | 17/6/2026 | A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. Cisco has addressed this vulnerability in the Cisco Webex Meetings service, and no… | |
| Analizada | Media (6.1) | 0.24% | — | Cisco Webex Meetings | 3/9/2025 | 17/6/2026 | A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this vulnerability in the Cisco Webex Meetings service, and no customer action is needed. This vulnerability existed because of… | |
| Aplazada | Media (5.4) | 0.10% | — | Cisco Webex MeetingsAI | 6/8/2025 | 17/6/2026 | A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeting-join process in place of an intended targeted user, provided the requisite conditions were satisfied. Cisco has addressed this vulnerability in the Cisco… | |
| Analizada | Media (4.3) | 0.19% | — | Cisco Webex Meetings | 21/5/2025 | 17/6/2026 | A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This vulnerability is due to improper handling of malicious HTTP requests to the affected service. An attacker could exploit this… | |
| Analizada | Media (6.1) | 0.30% | — | Cisco Webex Meetings | 21/5/2025 | 17/6/2026 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could… | |
| Analizada | Media (6.1) | 0.30% | — | Cisco Webex Meetings | 21/5/2025 | 17/6/2026 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could… | |
| Analizada | Media (6.1) | 0.30% | — | Cisco Webex Meetings | 21/5/2025 | 17/6/2026 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could… | |
| Analizada | Alta (8.8) | 0.97% | — | Cisco Webex Teams | 16/4/2025 | 17/6/2026 | A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient input validation when… | |
| Analizada | Media (5.4) | 0.82% | — | Cisco Webex Teams | 18/11/2024 | 17/6/2026 | A vulnerability in the web-based interface of Cisco Webex Teams could allow an authenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of usernames. An attacker could exploit this vulnerability by creating an account that contains malicious HTML or… | |
| Analizada | Media (4.3) | 0.83% | — | Cisco Webex Meetings | 18/11/2024 | 17/6/2026 | A vulnerability in the distribution list feature of Cisco Webex Meetings could allow an authenticated, remote attacker to modify a distribution list that belongs to another user of their organization. The vulnerability is due to insufficient authorization enforcement for requests to update distribution lists. An… | |
| Analizada | Media (6.1) | 0.59% | — | Cisco Webex Meetings | 15/11/2024 | 17/6/2026 | A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based interface of… | |
| Aplazada | Crítica (9.8) | 0.52% | — | Webextends Telecash RicaricawebAI | 16/10/2024 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in Webextends Telecash Ricaricaweb telecash-ricaricaweb allows Object Injection.This issue affects Telecash Ricaricaweb: from n/a through <= 2.2. | |
| Analizada | Media (6.5) | 0.42% | — | Cisco Webex Teams | 17/7/2024 | 17/6/2026 | A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability exists because the affected application does not safely handle file protocol handlers. An attacker could exploit this vulnerability by persuading a… | |
| Analizada | Alta (7.3) | 0.22% | — | Cisco Webex Teams | 17/7/2024 | 17/6/2026 | A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker… | |
| Modificada | Media (4.3) | 0.39% | — | Cisco Webex Meetings | 7/7/2023 | 17/6/2026 | A vulnerability in the web interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web interface on an affected system. An attacker could exploit… | |
| Modificada | Media (5.4) | 0.64% | — | Cisco Webex Meetings | 7/7/2023 | 17/6/2026 | A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because of insufficient validation of user-supplied input in Webex Events (classic) programs, email… | |
| Modificada | Media (6.5) | 0.45% | — | Cisco Webex Meetings | 5/4/2023 | 17/6/2026 | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Media (5.4) | 0.45% | — | Cisco Webex Meetings | 5/4/2023 | 17/6/2026 | Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Media (6.1) | 0.48% | — | Cisco Webex Teams | 3/3/2023 | 17/6/2026 | A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this… |