CVE-2022-20763

Medium

Description

A vulnerability in the login authorization components of Cisco Webex Meetings could allow an authenticated, remote attacker to inject arbitrary Java code. This vulnerability is due to improper deserialization of Java code within login requests. An attacker could exploit this vulnerability by sending malicious login requests to the Cisco Webex Meetings service. A successful exploit could allow the attacker to inject arbitrary Java code and take arbitrary actions within the Cisco Webex Meetings application.

SeverityMedium
CVSS5.4
Exploit probability—
ProductCisco Webex Meetings Online
PublishedApr 6, 2022
First seenApr 6, 2022

How to fix

Affected products

ProductAffected versionsFixed in
cisco webex_meetings_onlinewbs42.2.1-1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-20763 · Cisco Webex Meetings Online · Dark Radar