Cisco Webex Video Mesh vulnerabilities

CVE-2021-1500 [MEDIUM] CWE-601 CVE-2021-1500: A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unaut A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted

CVE-2021-40115 [MEDIUM] CWE-79 CVE-2021-40115: A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user t

CVE-2019-16005 [HIGH] CWE-77 CVE-2019-16005: A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authe A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerab