Vulnerability · NVD

CVE-2019-1677

CVE-2019-1677, medium severity (CVSS 4.6): 1 tracked app concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 4.6
Exploitation: 0.4 %
Tracked apps: 1
Still exposed: 0

Published on 2019-02-07

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerability by sending a malicious request to the Webex Meetings application through an intent. A successful exploit could allow the attacker to execute script code in the context of the Webex Meetings application. Versions prior to 11.7.0.236 are affected.

Attack vector : Local

Show raw CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS 0.39% exploit very unlikely percentile 30.5%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Webex Meetings Android com.cisco.webex.meetings

Affected <11.7.0.236 Fixed in 11.7.0.236 Latest tracked 45.3.0 patched

Observed affected builds (2)

11.6.0 11.4.1

Vulnerable CPE configurations (1)

Vendor	Product	Platform	Versions	CPE 2.3 URI
cisco	webex_meetings Android	Android	<11.7.0.236	cpe:2.3:a:cisco:webex_meetings::::::android::*

View on NVD ↗ Advisory · tools.cisco.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM