https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 02:12:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05754 bdu:2024-05754 https://cve.radiocsirt.org/vuln/bdu:2024-05754 https://cve.radiocsirt.org/vuln/cisco-sa-webex-app-zjnm8x8j <p>Multiple vulnerabilities in Cisco Webex App could allow an unauthenticated attacker to gain access to sensitive credential information. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. The updates are part of the Cisco Webex service, and no customer action is necessary to get these software updates. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in Cisco Webex App could allow an unauthenticated attacker to gain access to sensitive credential information. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. The updates are part of the Cisco Webex service, and no customer action is necessary to get these software updates. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-webex-app-zjnm8x8j https://cve.radiocsirt.org/vuln/euvd-2026-3677 EUVD-2026-3677 https://cve.radiocsirt.org/vuln/euvd-2026-3677 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20395 <p>A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media that is stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user.</p> <p>A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media that is stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20395 https://cve.radiocsirt.org/vuln/ghsa-28jg-69qr-j99g <p>A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information.</p> <p>This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media that is stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user.</p> <p>A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information.</p> <p>This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media that is stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user.</p> https://cve.radiocsirt.org/vuln/ghsa-28jg-69qr-j99g https://cve.radiocsirt.org/vuln/gsd-2024-20395 gsd-2024-20395 https://cve.radiocsirt.org/vuln/gsd-2024-20395 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1668 <p>Ein entfernter oder ein angrenzender Angreifer kann mehrere Schwachstellen in Cisco WebEx ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter oder ein angrenzender Angreifer kann mehrere Schwachstellen in Cisco WebEx ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1668