CVE-2020-27126

A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supplied input to an application programmatic interface (API) within Cisco Webex Meetings. An attacker could exploit this vulnerability by convincing a targeted user to follow a link designed to submit malicious input to the API used by Cisco Webex Meetings. A successful exploit could allow the attacker to conduct cross-site scripting attacks and potentially gain access to sensitive browser-based information from the system of a targeted user.

• CWE-80
• CWE-79

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-meetings-xss-MX56prERVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-meetings-xss-MX56prERVendor Advisory

Published

Nov 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2712Vulnerability in the Oracle Banking Payments product of Orac…5.4
• CVE-2020-27121A vulnerability in Cisco Unified Communications Manager IM &…6.5
• CVE-2020-27122A vulnerability in the Microsoft Active Directory integratio…6.7
• CVE-2020-27123A vulnerability in the interprocess communication (IPC) chan…5.5
• CVE-2020-27124A vulnerability in the SSL/TLS handler of Cisco Adaptiv…8.6
• CVE-2020-27125A vulnerability in Cisco Security Manager could allow an una…9.8
• CVE-2020-27127Multiple vulnerabilities in Cisco Jabber for Windows, Jabber…9.9
• CVE-2020-27128A vulnerability in the application data endpoints of Cisco S…6.5
• CVE-2020-27129A vulnerability in the remote management feature of Cisco SD…6.7
• CVE-2020-2713Vulnerability in the Oracle Banking Payments product of Orac…7.1
• CVE-2020-27130A vulnerability in Cisco Security Manager could allow an una…9.1
• CVE-2020-27131Multiple vulnerabilities in the Java deserialization functio…9.8