CVE-2021-1242

MEDIUM

Cisco Webex Teams - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The vulnerability exists because the affected software mishandles character rendering. An attacker could exploit this vulnerability by sharing a file within the application interface. A successful exploit could allow the attacker to modify how the shared file name displays within the interface, which could allow the attacker to conduct phishing or spoofing attacks.

References (1)

Core 1
Core References

Scores

CVSS v3 4.3
EPSS 0.0037
EPSS Percentile 59.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-450
Status published
Products (1)
cisco/webex_teams < 40.12.0.17293
Published Jan 13, 2021
Tracked Since Feb 18, 2026