[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcbvfbg5okGjVQ8xdh3e_AmTw6vfQSYdzTh1T10HB2TY":3,"g5a-risk:CVE-2019-1866":120},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":26,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":56,"weaknesses":63,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":26,"otxData":26,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":116,"notableEvents":117},"CVE-2019-1866","What is CVE-2019-1866?","Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker to affect the integrity of the application. The vulnerability is due to improper validation of host header values. An attacker with a privileged network position, either a man-in-the-middle or by intercepting wireless network traffic, could exploit this vulnerability to manipulate header values sent by a client to the affected application. The attacker could cause the application to use input from the header to redirect a user from the Cisco Webex Meetings Online site to an arbitrary site of the attacker's choosing.","Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker to affect the integrity of the applica...","2020-04-13T17:15:10.937","2020-04-13T18:35:37.753",3.7,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":37,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","LOW",null,2.2,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"ykramarz@cisco.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":34,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","REQUIRED",3.1,1.6,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":42,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":42,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":43,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","MEDIUM","PARTIAL",4.3,8.6,2.9,0.00336,[47,47,47,47,47,47,47],"Low",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"cisco","webex_business_suite_39","*","cpe:2.3:a:cisco:webex_business_suite_39:*:*:*:*:*:*:*:*",1,[58],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fquickview.cloudapps.cisco.com\u002Fquickview\u002Fbug\u002FCSCvm98833","Cisco",[62],"Vendor Advisory",[64,72],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":71},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","","Draft","Class",2,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2019-1866? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-1866, a low severity cyber security vulnerability from 2020. Cisco Webex Business Suite before 39.1.0 contains a vulnerabi...","CVE-2019-1866, CVE-2019-1866 vulnerability, CVE-2019-1866 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, cisco security, webex_business_suite_39 vulnerability","\u002Fwhat-is\u002Fcve-2019-1866",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-1866","Cybersecurity","CVE-2019-1866, CVE-2019-1866 vulnerability, CVE-2019-1866 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":26,"Negate":26,"Nodes":109},[110],{"Operator":111,"Negate":26,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":115,"VersionEndIncluding":26},"3153C319-BBAE-454E-B949-37EDEA0027B4","39.1.0",[],[],{"lastModified":11,"cacheTime":119,"version":40},1792373099709,{"score":121,"band":49,"action":122,"scoredAt":123},22,"Monitor","2026-10-16T06:48:19.343717+00:00"]