Cisco Webex App Vulnerabilities
Multiple vulnerabilities in Cisco Webex App could allow an unauthenticated attacker to gain access to sensitive credential information. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. The updates are part of the Cisco Webex service, and no customer action is necessary to get these software updates. There are no workarounds that address these vulnerabilities.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20396US | medium6.5 | — | ||
A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information.
This vulnerability exists be… | ||||
| CVE-2024-20395US | high7.3 | — | ||
A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information.
This v… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- CSCwj36941external
- CSCwj36943external
- CSCwj36947external
- Cisco Webex App Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
remediations (2)
- FixedCisco Webex App
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Webex App
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan