CVE-2020-3345

published 2020-07-16

CVE-2020-3345: A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web…

medium 4.3 CVSS 3.1

AV N AC L PR N UI R S U C N I L A N

A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web page in the context of a browser. The vulnerability is due to improper checks on parameter values within affected pages. An attacker could exploit this vulnerability by persuading a user to follow a crafted link that is designed to pass HTML code into an affected parameter. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious web sites, or the attacker could leverage this vulnerability to conduct further client-side attacks.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_webex_meetings_server	—	—
cisco	webex_meetings	< 40.6.0	40.6.0
cisco	webex_meetings_and_cisco_webex_meetings_server_html	—	—
cisco	webex_meetings_server	<= 4.0	—
cisco	webex_meetings_server	—	—

CWE-20