Read the docs
TI-2019-01559 Aliases CVE-2019-1939GHSA-w3v7-95f2-5pgr

Cisco Webex Teams Logging Feature Command Execution Vulnerability

Priority MEDIUM 47CWE-74Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-269.

Summary

A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to visit a website designed to submit malicious input to the affected application. A successful exploit could allow the attacker to cause the application to modify files and execute arbitrary commands on the system with the privileges of the targeted user.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.04313 91st percentileScored 2026-11-07
Fix Fixed Cisco Webex Teams (Cisco): 3.0.12427.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Webex Teamsbefore 3.0.12427.03.0.12427.0Patch availableCNA
  • Cisco Webex Teams VendorCisco Affected before 3.0.12427.0 Fixed in 3.0.12427.0 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:cisco:webex_teams:*:*:*:*:*:*:*:*before 3.0.12427.0VulnerableCisco
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:cisco:webex_teams:*:*:*:*:*:*:*:* Versions before 3.0.12427.0 Vulnerable ·Cisco
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

  • Fix · CNA Cisco Webex Teams (Cisco) Fixed in 3.0.12427.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-1939
  2. 2026-10-03 Alias added: GHSA-w3v7-95f2-5pgr

References

Advisory 1

  • TI-2019-01262 Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability CVSS 3.0HIGH 7.8
  • TI-2018-00346 Improper input validation in Cisco Webex Teams unknown CVSS 3.1HIGH 8.8
  • TI-2025-14536 Cisco Webex App Client-Side Remote Code Execution Vulnerability CVSS 3.1HIGH 8.8
  • TI-2018-00395 Cisco Webex Teams Information Disclosure and Modification Vulnerability CVSS 3.1HIGH 8.7
  • TI-2020-03080 Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability CVSS 3.1HIGH 8.4
  • TI-2021-01229 Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability CVSS 3.1HIGH 7.8
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences