CVE-2023-20180
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A vulnerability in the web interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web interface on an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions. These actions could include joining meetings and scheduling training sessions.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Webex Meetings
- Vendor
- Cisco
- Product
- Cisco Webex Meetings
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 39.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.11 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.7.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.7.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.8.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.8.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.8.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 39.9.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 40.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 40.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 40.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 40.4.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 40.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 40.6.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 42.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 42.11 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 42.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 42.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 42.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 42.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 42.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 43.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 43.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 43.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 43.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 43.4.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 43.5.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 43.4.1 | affected | Unavailable | Unavailable | Unavailable | None listed |