CVE-2022-20863 is a medium-severity vulnerability affecting the messaging interface of Cisco Webex App (formerly Webex Teams). It allows an unauthenticated, remote attacker to manipulate how links or other content are displayed due to improper character rendering. A successful exploit could enable phishing or spoofing attacks by altering the visual presentation of messages. The vulnerability has a CVSS score of 5.3, indicating a medium severity. It can be exploited remotely with low attack complexity and no user interaction, but only impacts the integrity of displayed information, not confidentiality or availability. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, which is typical for the majority of reported vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 42.7CPE matchmatch criteria | cpe:2.3:a:cisco:webex_teams:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.