VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Nov 15, 2024· Updated Jun 17, 2026

CVE-2022-20654

CVE-2022-20654

Description

A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based interface of Cisco Webex Meetings. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

20
  • Cisco Systems, Inc./Webex Meetings20 versions
    cpe:2.3:a:cisco:webex_meetings:39.10:*:*:*:*:*:*:*+ 19 more
    • cpe:2.3:a:cisco:webex_meetings:39.10:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.11:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.6:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.7.7:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.7:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.8:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.9:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.6:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 39.7.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.