VYPR
← All advisories
Medium severity4.1NVD Advisory· Published Aug 17, 2020· Updated Jun 17, 2026

CVE-2020-3502

CVE-2020-3502

Description

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web site. An attacker with a valid Webex account could exploit these vulnerabilities by persuading a user to follow a URL that is designed to return malicious path parameters to the affected software. A successful exploit could allow the attacker to obtain restricted information from other Webex users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Cisco Systems, Inc./Webex Meetings3 versions
    cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:*:*:*range: <39.5.24
    • cpe:2.3:a:cisco:webex_meetings:39.7.4:*:*:*:*:*:*:*
    • (no CPE)range: n/a
  • Cisco Systems, Inc./Webex Meetings Server7 versions
    cpe:2.3:a:cisco:webex_meetings_server:3.0:-:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:cisco:webex_meetings_server:3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*
  • Cisco Systems, Inc./Webex Meetings Desktop Appllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.