CVE-2021-1420

CWE-804 documents4 sources
Severity
4.7MEDIUM
EPSS
0.4%
top 42.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Cisco Webex Meetings
Timeline
PublishedApr 8
Latest updateMay 24

Description

A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a user's browser. The vulnerability is due to improper checks on parameter values in affected pages. An attacker could exploit this vulnerability by persuading a user to follow a crafted link that is designed to pass HTML code into an affected parameter. A successful exploit could allow the attacker to alter the contents of a web page to redirect the…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-328f-3qhj-7364: A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a↗2022-05-24
▶
CVEList
Cisco Webex Meetings HTML Injection Vulnerability↗2021-04-08
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Meetings HTML Injection Vulnerability↗2021-04-07
▶
CVE-2021-1420 (MEDIUM CVSS 4.7) | A vulnerability in certain web page | cvebase.io