CVE-2023-20132
Assigner: cisco
Published: 2023-04-05T00:00:00
State: PUBLISHED
title: Cisco Webex Meetings Web UI Vulnerabilities
datePublic: 2023-04-05T00:00:00
descriptions: value: Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory.
affected: vendor: Cisco
product: Cisco Webex Meetings 
versions: version: n/a
status: affected
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
problemTypes: descriptions: type: CWE
description: CWE-20
cweId: CWE-20
source: advisory: cisco-sa-wbx-sxss-fupl-64uHbcm5
defect: CSCwe38537
CSCwe38541
discovery: INTERNAL
exploits: value: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.