← Vulnerability feed

Vulnerability record · CVE-2018-15461 · published 10 January 2019

CVE-2018-15461: Cisco webex business suite cross-site scripting vulnerability

Cisco · Webex Business Suite

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convincing a user to click a crafted URL. To exploit this vulnerability, the attacker may provide a link that directs a user to a malicious site and use misleading language or instructions to persuade the user to follow the provided link.

6.1 CVSS 3.0 Medium EPSS 1.2% · top 32.4% CWE-79 · Cross-site scripting
6.1CVSS 3.0 base score, v2 4.3
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convincing a user to click a crafted URL. To exploit this vulnerability, the attacker may provide a link that directs a user to a malicious site and use misleading language or instructions to persuade the user to follow the provided link.

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/106505 Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-webex-bs-xss Vendor Advisory
http://www.securityfocus.com/bid/106505 Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-webex-bs-xss Vendor Advisory

Track CVE-2018-15461 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.6CVE-2018-0104Cisco webex business suite improper input validation vulnerabilityA vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary …EPSS 3.8%7.8CVE-2019-15286Cisco webex business suite memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an at…EPSS 1.4%7.8CVE-2019-15284Cisco webex business suite memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an at…EPSS 1.4%7.8CVE-2019-1924Cisco webex business suite memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an at…EPSS 1.5%7.8CVE-2019-1929Cisco webex business suite memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an at…EPSS 1.5%7.8CVE-2019-1927Cisco webex business suite memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an at…EPSS 1.5%7.8CVE-2019-1928Cisco webex business suite memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an at…EPSS 1.5%7.8CVE-2019-1926Cisco webex business suite memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an at…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2018-15461), CISA KEV, FIRST EPSS (scores of 2026-10-09). This page is refreshed as NVD updates the record.