HTTP Cache Poisoning Vulnerability in Cisco Webex Meetings

CVE-2025-20255

What is CVE-2025-20255?

A vulnerability exists in the client join services of Cisco Webex Meetings, potentially allowing unauthenticated remote attackers to exploit cached HTTP responses. This vulnerability arises from inadequate handling of malicious HTTP requests directed at the join service, enabling an attacker to perform HTTP cache poisoning. By successfully manipulating the stored HTTP responses within the service, attackers could force Webex Meetings to deliver incorrect information to clients, leading to unreliable service operations.

References