Cisco Webex Meetings vulnerabilities

69 CVEs affecting Cisco Webex Meetings, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20233, published 2026-06-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-17428, published 2018-03-05. Medium severity, CVSS 5.9. EPSS: 14.6% chance of exploitation in the next 30 days. Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT…
CVE-2019-1674, published 2019-02-28. High severity, CVSS 8.8. EPSS: 9.8% chance of exploitation in the next 30 days. A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as…
CVE-2017-6753, published 2017-07-25. High severity, CVSS 8.8. EPSS: 6% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected…
CVE-2020-3263, published 2020-06-18. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation…
CVE-2020-3342, published 2020-06-18. High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability in the software update feature of Cisco Webex Meetings Desktop App for Mac could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The…
CVE-2018-0104, published 2018-01-04. Critical severity, CVSS 9.6. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The…
CVE-2018-0264, published 2018-05-02. Critical severity, CVSS 9.6. EPSS: 3% chance of exploitation in the next 30 days. A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execute arbitrary code on the system of a…
CVE-2017-12372, published 2017-11-30. Critical severity, CVSS 9.6. EPSS: 3% chance of exploitation in the next 30 days. A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files.…
CVE-2017-12371, published 2017-11-30. Critical severity, CVSS 9.6. EPSS: 3% chance of exploitation in the next 30 days. A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files.…
CVE-2017-12370, published 2017-11-30. Critical severity, CVSS 9.6. EPSS: 3% chance of exploitation in the next 30 days. A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files.…

Latest

CVE-2026-20233, published 2026-06-03. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this…
CVE-2025-20328, published 2025-09-03. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to conduct a cross-site scripting (XSS) attack against a…
CVE-2025-20291, published 2025-09-03. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this…
CVE-2025-20255, published 2025-05-21. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This…
CVE-2025-20250, published 2025-05-21. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input.…
CVE-2025-20247, published 2025-05-21. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input.…
CVE-2025-20246, published 2025-05-21. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input.…
CVE-2021-1410, published 2024-11-18. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the distribution list feature of Cisco Webex Meetings could allow an authenticated, remote attacker to modify a distribution list that belongs to another user of their…
CVE-2022-20654, published 2024-11-15. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…
CVE-2023-20180, published 2023-07-07. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This…