CVE-2017-6753

A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system. This vulnerability affects the browser extensions for Cisco WebEx Meetings Server, Cisco WebEx Centers (Meeting Center, Event Center, Training Center, and Support Center), and Cisco WebEx Meetings when they are running on Microsoft Windows. The vulnerability is due to a design defect in the extension. An attacker who can convince an affected user to visit an attacker-controlled web page or follow an attacker-supplied link with an affected browser could exploit the vulnerability. If successful, the attacker could execute arbitrary code with the privileges of the affected browser. The following versions of the Cisco WebEx browser extensions are affected: Versions prior to 1.0.12 of the Cisco WebEx extension on Google Chrome, Versions prior to 1.0.12 of the Cisco WebEx extension on Mozilla Firefox. Cisco Bug IDs: CSCvf15012 CSCvf15020 CSCvf15030 CSCvf15033 CSCvf15036 CSCvf15037.

• CWE-119
• CWE-119

• http://www.securityfocus.com/bid/99614Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038909Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038910Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038911Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170717-webexVendor Advisory
• http://www.securityfocus.com/bid/99614Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038909Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038910Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038911Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170717-webexVendor Advisory

Published

Jul 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6747A vulnerability in the authentication module of Cisco Identi…
• CVE-2017-6748A vulnerability in the CLI parser of the Cisco Web Security …
• CVE-2017-6749A vulnerability in the web-based management interface of Cis…
• CVE-2017-6750A vulnerability in AsyncOS for the Cisco Web Security Applia…
• CVE-2017-6751A vulnerability in the web proxy functionality of the Cisco …7.5
• CVE-2017-6752A vulnerability in the web interface of the Cisco Adaptive S…
• CVE-2017-6754A vulnerability in the web-based management interface of the…
• CVE-2017-6755A vulnerability in the web portal of the Cisco Prime Collabo…
• CVE-2017-6756A vulnerability in the Web UI Application of the Cisco Prime…
• CVE-2017-6757A vulnerability in Cisco Unified Communications Manager 10.5…
• CVE-2017-6758A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-6759A vulnerability in the UpgradeManager of the Cisco Prime Col…