Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Webex Teams · all components

Priority MEDIUM 47

A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04313 Published 2019-09-05 Fixed in 3.0.12427.0 CWE-74
Priority MEDIUM 46

A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03106 Published 2018-07-18 No fix listed CWE-20
Priority MEDIUM 42

A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00988 Published 2025-04-16 No fix listed CWE-829
Priority MEDIUM 42

A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.01284 Published 2018-10-05 No fix listed CWE-284
Priority LOW 39

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00593 Published 2020-10-08 No fix listed CWE-427
Priority LOW 36

A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices and Cisco collaborati…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00896 Published 2020-03-04 No fix listed CWE-295
Priority LOW 35

A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated, remote attacker to upload arbitrary files within the scope of the iOS application.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.01574 Published 2019-02-25 Fixed in 3.13.26920 CWE-20
Priority LOW 34

A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attack…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00326 Published 2021-06-04 No fix listed CWE-427
Priority LOW 33

A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the client to crash, resulting in a denial of service (DoS) condition.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0218 Published 2020-01-26 No fix listed CWE-400
TI-2024-13329 CVE-2024-20396 · GHSA-67ww-939x-f5pp

Information disclosure in Cisco Webex Teams

Priority LOW 29

A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00417 Published 2024-07-17 No fix listed CWE-200
Priority LOW 28

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00481 Published 2023-03-03 No fix listed CWE-79
Priority LOW 26

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00876 Published 2022-09-08 No fix listed CWE-450
Priority LOW 26

A vulnerability in the web-based interface of Cisco Webex Teams could allow an authenticated, remote attacker to conduct cross-site scripting attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00829 Published 2024-11-18 No fix listed CWE-80
Priority LOW 24

A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack.

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00377 Published 2019-11-26 No fix listed CWE-427
Priority LOW 23

A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01368 Published 2021-01-13 No fix listed CWE-450
Priority LOW 20

A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to ga…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00326 Published 2020-09-04 No fix listed CWE-200
Open these records in search →