Lucene search
HistoryJan 10, 2015 - 2:59 a.m.
CVE-2014-8035
cve-2014-8035
cisco
webex meetings server
url requests
remote attackers
user accounts
bug id cscuj40247
security vulnerability
enumeration
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
68.2%
The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:webex_meetings_server | cisco webex meetings server | eq | - |
Related
prion
prion
Code injection
2015-01-10 02:59:00
cvelist
cvelist
CVE-2014-8035
2015-01-10 02:00:00
cisco
cisco
Cisco WebEx Meetings Server User Enumeration Vulnerability
2015-01-23 22:25:56
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
68.2%
Related for CVE-2014-8035