URL Redirection Vulnerability in Cisco Webex Meetings
CVE-2025-20291

4.3MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Webex Meetings
Vendor
CVE Published:
3 September 2025

Badges

👾 Exploit Exists

What is CVE-2025-20291?

A vulnerability in Cisco Webex Meetings enables an unauthenticated, remote attacker to exploit insufficient URL validation in meeting-join links. By crafting a malicious join URL, the attacker could redirect a targeted user to a potentially harmful website, which might mislead the user into thinking it is a legitimate Webex page. This exploit heightens the risk of phishing attacks, as users may inadvertently provide sensitive information on the fraudulent site. Cisco has implemented measures to mitigate this risk, eliminating the need for customer action.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cisco Webex Meetings

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.