March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – From LokiBot to Xerxes to BlackRock banking Trojan
July 21, 2020
Rewterz Threat Alert – Fake Voicemail Phishing Campaigns
July 22, 2020
Rewterz Threat Alert – From LokiBot to Xerxes to BlackRock banking Trojan
July 21, 2020
Rewterz Threat Alert – Fake Voicemail Phishing Campaigns
July 22, 2020
Severity
Medium
Analysis Summary
The vulnerability is due to improper checks on parameter values within affected pages. An attacker could exploit this vulnerability by persuading a user to follow a crafted link that is designed to pass HTML code into an affected parameter. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious web sites, or the attacker could leverage this vulnerability to conduct further client-side attacks.
Impact
- HTML Injection
- Modification of web page
Affected Vendors
Cisco
Affected Products
- Cisco Webex Meetings releases earlier than Release 40.6.0
- Cisco Webex Meetings Server releases earlier than Release 4.0
Remediation
Refer to Cisco advisory for the list of affected products and their respective patches.