Vulnerability record · CVE-2018-0387 · published 18 July 2018

CVE-2018-0387: Cisco webex teams improper input validation vulnerability

Cisco · Webex Teams

A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges. The vulnerability occurs because Cisco Webex Teams does not properly sanitize input. An attacker could exploit the vulnerability by sending a user a malicious link and persuading the user to follow the link. A successful exploit could allow the attacker to execute arbitrary code on the user's system. Cisco Bug IDs: CSCvh66250.

8.8 CVSS 3.1 High EPSS 3.1% · top 12.7% CWE-20 · Improper input validation

8.8CVSS 3.1 base score, v2 9.3

3.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Webex Teams Cisco

References

Link	Tags
http://www.securityfocus.com/bid/104873	Broken Link
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-webex-teams-rce	Vendor Advisory
http://www.securityfocus.com/bid/104873	Broken Link
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-webex-teams-rce	Vendor Advisory

Track CVE-2018-0387 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2025-20236Cisco webex teams inclusion from untrusted sphere vulnerabilityA vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary …EPSS 0.97%16 Apr 2025 8.8CVE-2019-1939Cisco webex teams injection vulnerabilityA vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affec…EPSS 4.3%5 Sep 2019 8.7CVE-2018-0436Cisco webex teams improper access control vulnerabilityA vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization…EPSS 1.3%5 Oct 2018 8.4CVE-2020-3535Cisco webex teams uncontrolled search path element vulnerabilityA vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to…EPSS 0.59%8 Oct 2020 7.8CVE-2021-1536Cisco webex meetings desktop uncontrolled search path element vulnerabilityA vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and C…EPSS 0.33%4 Jun 2021 7.8CVE-2021-1502Cisco webex meetings desktop memory buffer overflow vulnerabilityA vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to…EPSS 1.1%4 Jun 2021 7.8CVE-2019-1636Cisco Webex Teams Windows client unsafe search path allows command executionThe Cisco Webex Teams (formerly Spark) Windows client uses unsafe search paths for its application URI, so it can load libraries from a directory con…EPSS 47%analysed23 Jan 2019 7.4CVE-2020-3155Cisco intelligence proximity improper certificate validation vulnerabilityA vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alte…EPSS 0.90%4 Mar 2020

Source: NIST National Vulnerability Database (record CVE-2018-0387), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.