Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability

A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web page in the context of a browser. The vulnerability is due to improper checks on parameter values within affected pages. An attacker could exploit this vulnerability by persuading a user to follow a crafted link that is designed to pass HTML code into an affected parameter. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious web sites, or the attacker could leverage this vulnerability to conduct further client-side attacks.

N/A

输入验证不恰当

Cisco Webex Meetings和Webex Meetings Server 输入验证错误漏洞

Cisco WebEx Meetings Server（CWMS）和Cisco Webex Meetings都是美国思科（Cisco）公司的产品。Cisco WebEx Meetings Server是WebEx会议方案中的一套包含音频、视频和Web会议的多功能会议解决方案。Cisco Webex Meetings是一套视频会议解决方案。 Cisco Webex Meetings 40.6.0之前版本和Cisco Webex Meetings Server 4.0 MR3之前版本中的网页存在输入验证错误漏

N/A

N/A