A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convincing a user to click a crafted URL. To exploit this vulnerability, the attacker may provide a link that directs a user to a malicious site and use misleading language or instructions to persuade the user to follow the provided link.
Metrics
Affected Vendors & Products
References
History
Thu, 21 Nov 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2019-01-10T23:00:00Z
Updated: 2024-11-21T19:48:55.942Z
Reserved: 2018-08-17T00:00:00
Link: CVE-2018-15461
Vulnrichment
Updated: 2024-08-05T09:54:03.431Z
NVD
Status : Modified
Published: 2019-01-10T23:29:00.247
Modified: 2024-11-21T03:50:51.383
Link: CVE-2018-15461
Redhat
No data.