cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2022-20863,https://securityvulnerability.io/vulnerability/CVE-2022-20863,Cisco Webex Meetings App Character Interface Manipulation Vulnerability,"A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character rendering. An attacker could exploit this vulnerability by sending messages within the application interface. A successful exploit could allow the attacker to modify the display of links or other content within the interface, potentially allowing the attacker to conduct phishing or spoofing attacks.",Cisco,Cisco Webex Meetings Desktop App,4.3,MEDIUM,0.0011500000255182385,false,,false,false,true,2024-08-03T03:15:44.000Z,,false,false,,2022-09-07T00:00:00.000Z,0
CVE-2020-3588,https://securityvulnerability.io/vulnerability/CVE-2020-3588,Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability,"A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment optimization. This vulnerability is due to improper validation of messages processed by the Cisco Webex Meetings Desktop App. A local attacker with limited privileges could exploit this vulnerability by sending malicious messages to the affected software by using the virtualization channel interface. A successful exploit could allow the attacker to modify the underlying operating system configuration, which could allow the attacker to execute arbitrary code with the privileges of a targeted user. Note: This vulnerability can be exploited only when Cisco Webex Meetings Desktop App is in a virtual desktop environment on a hosted virtual desktop (HVD) and is configured to use the Cisco Webex Meetings virtual desktop plug-in for thin clients.",Cisco,Cisco Webex Meetings Desktop App,7.3,HIGH,0.0008800000068731606,false,,false,false,true,2024-08-04T08:16:47.000Z,,false,false,,2020-11-06T19:15:00.000Z,0
CVE-2020-3197,https://securityvulnerability.io/vulnerability/CVE-2020-3197,Cisco Meetings App Missing TURN Server Credentials Expiration Vulnerability,"A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT (TURN) server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TURN server credentials. An attacker could exploit this vulnerability by intercepting the legitimate traffic that is generated by an affected system. An exploit could allow the attacker to obtain the TURN server credentials, which the attacker could use to place audio/video calls and forward packets through the configured TURN server. The attacker would not be able to take control of the TURN server unless the same credentials were used in multiple systems.",Cisco,Cisco Meeting App,4.3,MEDIUM,0.001339999958872795,false,,false,false,true,2024-08-04T08:16:29.000Z,,false,false,,2020-07-16T18:15:00.000Z,0
CVE-2019-1674,https://securityvulnerability.io/vulnerability/CVE-2019-1674,Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability,"A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7.",Cisco,"Cisco Webex Meetings Desktop App,Cisco Webex Productivity Tools",7.8,HIGH,0.02662999927997589,false,,false,false,true,2024-08-04T19:16:03.000Z,,false,false,,2019-02-28T18:29:00.000Z,0
CVE-2017-12266,https://securityvulnerability.io/vulnerability/CVE-2017-12266,,"A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file with privileges equivalent to those of Cisco Meeting App. The vulnerability is due to incomplete input validation of the path name for DLL files before they are loaded. An attacker could exploit this vulnerability by installing a crafted DLL file in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to those of Cisco Meeting App. The attacker would need valid user credentials to exploit this vulnerability. Cisco Bug IDs: CSCvd77907.",Cisco,Cisco Meeting App,4.2,MEDIUM,0.0004199999966658652,false,,false,false,false,,,false,false,,2017-10-05T07:00:00.000Z,0
CVE-2016-6447,https://securityvulnerability.io/vulnerability/CVE-2016-6447,,"A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior to 1.9.3, Cisco Meeting App releases prior to 1.9.8, Acano Meeting Apps releases prior to 1.8.35. More Information: CSCva75942 CSCvb67878. Known Affected Releases: 1.81.92.0.",Cisco,"Cisco Meeting Server Before 2.0.1, Acano Server Before 1.9.3, Cisco Meeting App Before 1.9.8, Acano Meeting Apps Before 1.8.35",9.8,CRITICAL,0.01686999946832657,false,,false,false,false,,,false,false,,2016-11-03T21:00:00.000Z,0