CVE-2017-12296 — Cross-site Scripting in Cisco Webex Meetings Server

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 53.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Webex Meetings ServerCisco Webex Meetings Server
Timeline
PublishedOct 19
Latest updateMay 13

Description

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successf…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶NVDcisco/webex_meetings_server2.6, 2.7, 2.8+2
▶CVEListV5cisco/cisco_webex_meetings_serverCisco WebEx Meetings Server

🔴Vulnerability Details

2
GHSA
GHSA-h834-wmm2-p5p4: A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against↗2022-05-13
▶
CVEList
CVE-2017-12296: A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against↗2017-10-19
▶

📋Vendor Advisories

1
Cisco
Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability↗2017-10-18
▶
CVE-2017-12296 — Cross-site Scripting in Cisco | cvebase