CVE-2026-20233

MEDIUM 6.1

Cisco Webex Meetings Cross-Site Scripting Vulnerability

CVSS Score

6.1

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed. This vulnerability existed because of insufficient validation of user input. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

CWE	CWE-79
Vendor	cisco
Product	cisco webex meetings
Ecosystems	Networking
Industries	NetworkingTelecommunications
Published	Jun 3, 2026
Last Updated	Jun 3, 2026

Stay Ahead of the Next One

Get instant alerts for cisco cisco webex meetings

Be the first to know when new medium vulnerabilities affecting cisco cisco webex meetings are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

Cisco / Cisco Webex Meetings

39.7.7 39.9 40.4.10 39.6 40.6.2 39.8.2 39.8.4 40.1 39.11 39.7.4 39.9.1 40.4 40.6 39.7 39.8 39.8.3 40.2 39.10 42.6 42.7 42.8 42.9 42.10 42.11 42.12 43.1 43.2 43.3 43.4 43.4.1 43.4.2 43.5.0 43.6.0 43.6.1 43.7 43.8 43.9 43.10 43.11 43.12 44.1 44.2 44.3 44.4 44.5 44.6 44.7 44.8 44.9 44.10 44.11 44.12 45.1 45.2 45.3 45.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

sec.cloudapps.cisco.com: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-jw3NeQzS