4.1
CVSSv3

CVE-2020-3501

Published: 17/08/2020 Updated: 07/11/2023
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 4.1 | Impact Score: 1.4 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

Vulnerability Summary

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote malicious user to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web site. An attacker with a valid Webex account could exploit these vulnerabilities by persuading a user to follow a URL that is designed to return malicious path parameters to the affected software. A successful exploit could allow the malicious user to obtain restricted information from other Webex users.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco webex meetings server 3.0

cisco webex meetings server 4.0

cisco webex meetings

cisco webex meetings 39.7.4

Vendor Advisories

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users These vulnerabilities are due to improper input validation of parameters returned to the application from a web site An attacker with a valid Webex account could e ...