THREATOPS

THREAT OPS › Threat News › Cisco Webex Contact Center Cross-Site Scripting Vulnerability

Cisco Webex Contact Center Cross-Site Scripting Vulnerability

lowcisco_psirtPublished 2026-04-15

<p>A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has addressed this vulnerability in the Cisco Webex Contact Center service, and no customer action is needed.</p> <p>This vulnerability existed because HTML and script content was not properly handled. Prior to thi

MITRE ATT&CK techniques

Malicious LinkT1204.001
Malicious LinkAML.T0011.003

Indicators of compromise

CVE-2026-20170cve

Original source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webexcc-xss-WEX5nUnA?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Webex%20Contact%20Center%20Cross-Site%20Scripting%20Vulnerability%26vs_k=1