VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Jun 4, 2021· Updated Jun 17, 2026

CVE-2021-1525

CVE-2021-1525

Description

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file. This vulnerability is due to improper validation of URL paths in the application interface. An attacker could exploit this vulnerability by persuading a user to follow a specially crafted URL that is designed to cause Cisco Webex Meetings to include a remote file in the web UI. A successful exploit could allow the attacker to cause the application to offer a remote file to a user, which could allow the attacker to conduct further phishing or spoofing attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Cisco Systems, Inc./Webex Meetings Online
    cpe:2.3:a:cisco:webex_meetings_online:41.3.5:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Webex Meetings Server13 versions
    cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*range: <3.0
    • cpe:2.3:a:cisco:webex_meetings_server:3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3_security_patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3_security_patch4:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: n/a
  • Cisco Systems, Inc./Webex Meetingsllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.