This vulnerability exists because certain pages of the web interface do not properly validate user-supplied input. Exploitation of one of the vulnerabilities is not required to exploit the other vulnerability.ĭetails about the vulnerabilities are as follows:ĬVE-2022-20820: Cisco Webex Meetings Cross-Site Scripting VulnerabilityĪ vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.The vulnerabilities are not dependent on one another. The left column lists Cisco software releases, and the right column indicates whether a release was affected by the vulnerability that is described in this advisory and which release included the fix for this vulnerability. See the Details section in the bug ID(s) at the top of this advisory for the most complete and current information. Fixed ReleasesĪt the time of publication, the release information in the following table(s) was accurate. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release.

When considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page, to determine exposure and a complete upgrade solution.

Cisco webex mac interface