Priority CRITICAL 100KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-10 · Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority LOW 34
A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attack…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00326 · Published 2021-06-04 · No fix listed CWE-427
Priority LOW 29
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00783 · Published 2021-06-04 · No fix listed CWE-601
Priority LOW 24
A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00825 · Published 2021-06-04 · No fix listed CWE-693
Priority LOW 38
A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01024 · Published 2021-06-04 · No fix listed CWE-119
Priority LOW 38
A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01081 · Published 2021-06-04 · No fix listed CWE-119
Priority LOW 25
A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00424 · Published 2021-02-17 · No fix listed CWE-202
Priority LOW 21
A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email.
CVSS 3.1MEDIUM 4.1· Network · Low privileges · User interaction · EPSS 0.01042 · Published 2021-02-04 · No fix listed CWE-20
Priority LOW 27
A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.01279 · Published 2021-01-13 · No fix listed CWE-307
Priority LOW 32
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from an active Webex session.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01756 · Published 2020-11-18 · No fix listed CWE-20
Priority LOW 33
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the meeting room lobby.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01565 · Published 2020-11-18 · No fix listed CWE-20
Priority MEDIUM 43
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appearing on the participant list.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02151 · Published 2020-11-18 · No fix listed CWE-913
Priority MEDIUM 41
Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02637 · Published 2020-11-06 · No fix listed CWE-119
Priority MEDIUM 41
Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02772 · Published 2020-11-06 · No fix listed CWE-119
Priority MEDIUM 40
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01812 · Published 2020-09-23 · No fix listed CWE-119
Priority MEDIUM 40
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01812 · Published 2020-09-23 · No fix listed CWE-119
Priority MEDIUM 40
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01812 · Published 2020-09-23 · No fix listed CWE-119
Priority LOW 26
A vulnerability in the way Cisco Webex applications process Universal Communications Format (UCF) files could allow an attacker to cause a denial of service (DoS) condition.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00664 · Published 2020-09-23 · No fix listed CWE-20
Priority LOW 21
Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users.
CVSS 3.1MEDIUM 4.1· Network · Low privileges · User interaction · EPSS 0.01019 · Published 2020-08-17 · No fix listed CWE-20
Priority LOW 21
Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users.
CVSS 3.1MEDIUM 4.1· Network · Low privileges · User interaction · EPSS 0.01019 · Published 2020-08-17 · No fix listed CWE-20
Priority LOW 22
A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web page in the context of a browser.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01212 · Published 2020-07-16 · No fix listed CWE-20
Priority MEDIUM 47
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02423 · Published 2020-06-18 · No fix listed CWE-287
Priority MEDIUM 40
A vulnerability in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01955 · Published 2020-04-15 · No fix listed CWE-119
Priority LOW 18
vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker to bypass security protections.
CVSS 3.1LOW 3.5· Network · Low privileges · User interaction · EPSS 0.00863 · Published 2020-04-13 · No fix listed CWE-284
Priority MEDIUM 40
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01929 · Published 2020-03-04 · No fix listed CWE-20
Load more