Cisco Webex Teams vulnerabilities

19 CVEs affecting Cisco Webex Teams, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20236, published 2025-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-1636, published 2019-01-23. High severity, CVSS 7.8. EPSS: 46.9% chance of exploitation in the next 30 days. A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths…
CVE-2019-1939, published 2019-09-05. High severity, CVSS 8.8. EPSS: 4.3% chance of exploitation in the next 30 days. A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper…
CVE-2018-0387, published 2018-07-18. High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges. The…
CVE-2020-3131, published 2020-01-26. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the client to crash, resulting in a denial of service (DoS) condition. The attacker…
CVE-2019-1689, published 2019-02-25. High severity, CVSS 7.3. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated, remote attacker to upload arbitrary files within the scope of the iOS application. The…
CVE-2021-1242, published 2021-01-13. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The vulnerability exists because the affected software…
CVE-2018-0436, published 2018-10-05. High severity, CVSS 8.7. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The…
CVE-2021-1502, published 2021-06-04. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. The…
CVE-2025-20236, published 2025-04-16. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute…
CVE-2020-3155, published 2020-03-04. High severity, CVSS 7.4. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices…

Latest

CVE-2020-26067, published 2024-11-18. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based interface of Cisco Webex Teams could allow an authenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper…
CVE-2024-20396, published 2024-07-17. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability exists because the affected…
CVE-2024-20395, published 2024-07-17. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due…
CVE-2023-20104, published 2023-03-03. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…
CVE-2022-20863, published 2022-09-08. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging…
CVE-2021-1536, published 2021-06-04. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an…
CVE-2020-3535, published 2020-10-08. High severity, CVSS 8.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this…