CVE-2020-3126

vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker to bypass security protections. The vulnerability is due to missing security warning dialog boxes when a room host views shared multimedia files. An authenticated, remote attacker could exploit this vulnerability by using the host role to share files within the Multimedia sharing feature and convincing a former room host to view that file. A warning dialog normally appears cautioning users before the file is displayed; however, the former host would not see that warning dialog, and any shared multimedia would be rendered within the user's browser. The attacker could leverage this behavior to conduct additional attacks by including malicious files within a targeted room host's browser window.

• CWE-284
• CWE-20

• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs24436Vendor Advisory
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs24436Vendor Advisory

Published

Apr 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3120A vulnerability in the Cisco Discovery Protocol implementati…6.5
• CVE-2020-3121A vulnerability in the web-based management interface of Cis…6.1
• CVE-2020-3122A vulnerability in the web-based management interface of Cis…5.3
• CVE-2020-3123A vulnerability in the Data-Loss-Prevention (DLP) module in …7.5
• CVE-2020-3124A vulnerability in the web-based interface of Cisco Hosted C…6.5
• CVE-2020-3125A vulnerability in the Kerberos authentication feature of Ci…9.8
• CVE-2020-3127Multiple vulnerabilities in Cisco Webex Network Recording Pl…7.8
• CVE-2020-3128Multiple vulnerabilities in Cisco Webex Network Recording Pl…7.8
• CVE-2020-3129A vulnerability in the web-based management interface of Cis…4.8
• CVE-2020-3130A vulnerability in the web management interface of Cisco Uni…6.5
• CVE-2020-3131A vulnerability in the Cisco Webex Teams client for Windows …6.5
• CVE-2020-3132A vulnerability in the email message scanning feature of Cis…5.9