CVE-2026-20233

{"id": "CVE-2026-20233", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20233", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-03T17:46:57.004996Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Webex Meetings", "versions": [{"status": "affected", "version": "39.7.7"}, {"status": "affected", "version": "39.9"}, {"status": "affected", "version": "40.4.10"}, {"status": "affected", "version": "39.6"}, {"status": "affected", "version": "40.6.2"}, {"status": "affected", "version": "39.8.2"}, {"status": "affected", "version": "39.8.4"}, {"status": "affected", "version": "40.1"}, {"status": "affected", "version": "39.11"}, {"status": "affected", "version": "39.7.4"}, {"status": "affected", "version": "39.9.1"}, {"status": "affected", "version": "40.4"}, {"status": "affected", "version": "40.6"}, {"status": "affected", "version": "39.7"}, {"status": "affected", "version": "39.8"}, {"status": "affected", "version": "39.8.3"}, {"status": "affected", "version": "40.2"}, {"status": "affected", "version": "39.10"}, {"status": "affected", "version": "42.6"}, {"status": "affected", "version": "42.7"}, {"status": "affected", "version": "42.8"}, {"status": "affected", "version": "42.9"}, {"status": "affected", "version": "42.10"}, {"status": "affected", "version": "42.11"}, {"status": "affected", "version": "42.12"}, {"status": "affected", "version": "43.1"}, {"status": "affected", "version": "43.2"}, {"status": "affected", "version": "43.3"}, {"status": "affected", "version": "43.4"}, {"status": "affected", "version": "43.4.1"}, {"status": "affected", "version": "43.4.2"}, {"status": "affected", "version": "43.5.0"}, {"status": "affected", "version": "43.6.0"}, {"status": "affected", "version": "43.6.1"}, {"status": "affected", "version": "43.7"}, {"status": "affected", "version": "43.8"}, {"status": "affected", "version": "43.9"}, {"status": "affected", "version": "43.10"}, {"status": "affected", "version": "43.11"}, {"status": "affected", "version": "43.12"}, {"status": "affected", "version": "44.1"}, {"status": "affected", "version": "44.2"}, {"status": "affected", "version": "44.3"}, {"status": "affected", "version": "44.4"}, {"status": "affected", "version": "44.5"}, {"status": "affected", "version": "44.6"}, {"status": "affected", "version": "44.7"}, {"status": "affected", "version": "44.8"}, {"status": "affected", "version": "44.9"}, {"status": "affected", "version": "44.10"}, {"status": "affected", "version": "44.11"}, {"status": "affected", "version": "44.12"}, {"status": "affected", "version": "45.1"}, {"status": "affected", "version": "45.2"}, {"status": "affected", "version": "45.3"}, {"status": "affected", "version": "45.4"}], "defaultStatus": "unknown"}]}], "published": "2026-06-03T18:16:20.320", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-jw3NeQzS", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed.\r\n\r\nThis vulnerability existed because of insufficient validation of user input. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information."}], "lastModified": "2026-06-17T10:17:18.893", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_meetings:39.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C10CCD2-17FB-4BBA-86E3-64228A2661E8"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20608889-3684-4479-B028-C5E70F661591"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A9F521F-5D30-4DE7-A308-D1EC7F17C5FB"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA6A48E8-0B18-49F7-9869-A493F356778E"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F86C0BC-0853-4935-B264-C6715AA3846C"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3875C388-7B83-451C-8F37-609A414B847E"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17D2A6BB-43D5-4907-BA8E-0EFC5C45A8E4"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43E36526-AD0B-4020-86B5-0681D6D4A845"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5D6E81A-5CD3-4984-B9AA-31573DFA0CA9"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1752401-15DE-42A1-B7A1-F6C82DAEE1A4"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C33925F4-3921-4FDD-AA6B-81061ED9A1BD"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:39.11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9730F01-1612-46E6-9AA1-80B2D1D61BAF"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:40.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5EB0ACC-4FFA-443B-AE45-757DBBE47579"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:40.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED5315D1-865A-47C9-9DFC-4F6A071C8D46"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:40.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C43E965-3DD8-4904-B4B4-2CE504A1473D"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:40.4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F82C6242-BCD3-43C1-8B1D-4044C4263050"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:40.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6578FEFD-CC4A-401A-B769-A3BB8998CBF1"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:40.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11176259-0359-416D-A22D-DEBEBE755FE9"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:42.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FEC5E67-DFEA-4654-ACDA-D3CF7B53B20B"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:42.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64BEDE4E-B77D-4015-BB2A-B306322A33A1"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:42.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEFBF53E-8537-4F7F-BB98-1B4FE4006251"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:42.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20A92B49-3D95-4147-A854-CE1938A3C517"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:42.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E56AB27-1D90-45A8-BF88-FEBC400B7607"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:42.11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "978E3F35-1B46-4192-BF7B-DD262C060435"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:42.12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFFE4AF5-2AE9-4637-B0DB-AEF4208BC0F6"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "448FB82E-A686-494A-A258-9D1067D6EB6B"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BB30686-198C-4C37-B54F-4B2A4C64BDBE"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D466BF87-5DA1-46C6-A218-765957C19E63"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4184DA56-1ABA-41EC-A4BB-897D3988E098"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68570B19-32BB-441C-9C00-C1A839CBD985"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55BD3A1F-9453-40EE-B155-8182BA49C1CB"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0FE1DED-33FB-4118-80E7-86D4641C7E61"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "237B4813-72B7-4154-BAB7-4056CED952CB"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D60F5271-1496-490F-A7BF-CDEE5EFF2FE0"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19F40E62-7E53-4BCA-85E8-598D9924BA67"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49FA7256-0B5C-44D4-9CF8-D2F9363E5206"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1B4085A-EBFF-4031-99F5-7B8ABD4E2695"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D89BAFF-753C-422E-9683-179720FE07A0"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D447ABA0-F9DA-4C64-9AA4-0BCCABE05C51"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:43.12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C511595-CF24-4623-9617-6898FA057189"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59879F82-813A-4261-9DCF-DB7A846027B5"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6E52164-17F0-4C92-A15A-B66BAB393FF1"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECC5FD0A-898A-439F-8412-5E88408693E3"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6235DB7-30E6-479E-A5D5-F31B8D73576F"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE54AB58-B082-4FCA-866E-C5D5B551C737"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFDF52C8-259F-4948-8877-40EB9609EFC8"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F01D51EF-E327-49C4-94D8-2BC2845AA5B9"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A657542-06BF-4120-917B-790AED9CE7BB"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CA6BC77-778C-4BD8-86A1-22F09DF063EE"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFDB8336-B110-4452-A9C7-40C4859B58DB"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DDFB0AF-89E6-4A26-B7FF-3BFD91F01006"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:44.12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A903890E-A6C2-4562-AE80-C91BFDA2717A"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:45.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AA76D54-CA52-44FF-ADE6-003C8FC82351"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:45.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B2B43CC-095D-4FD2-9E1F-DE289A2357E6"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:45.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9E83AE6-412F-4B18-9A17-E72B18F5115B"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:45.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14DE9D4D-F620-4084-8165-8A38C02785E3"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}