CVE-2016-6445

The CVE-2016-6445 issue affects Cisco Meeting Server (CMS) and Acano Server where the XMPP service processes a deprecated authentication scheme, allowing an unauthenticated, remote attacker to masquerade as another user. Affected versions include CMS before 2.0.6 and Acano Server before 1.8.18 an...

CVE-2016-6444

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a Web Bridge user. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0...

CVE-2016-6444

CVE-2016-6444 affects Cisco Meeting Server. The OpenVAS and CVE records describe an unauthenticated, remote CSRF vulnerability in the Web Bridge interface caused by insufficient CSRF protections. An attacker could lure a user to a malicious link to submit arbitrary requests to the device with the...

CVE-2016-6446

Cisco Meeting Server Web Bridge vulnerability (CVE-2016-6446) allows an unauthenticated remote attacker to disclose memory from a connected server. The issue stems from missing bounds checks in the Web Bridge functionality; a crafted packet can per-packet disclose memory, potentially exposing pri...

CVE-2016-6446

A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0...

CVE-2016-6445

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of the Cisco Meeting Server CMS before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XM...

Cisco Meeting Server Information Disclosure Vulnerability

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. There is an information disclosure vulnerability in Cisco Meeting Server that can be exploited by an attacker to obtain sensitive...

Cisco Meeting Server Cross-Site Scripting Vulnerability (CNVD-2016-10126)

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. A cross-site scripting vulnerability exists in the Web-based management interface of Cisco Meeting Server. A remote attacker can exploit...

Cisco Meeting Server Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a Web Bridge user. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by convincing the user of...

Cisco Meeting Server Information Disclosure Vulnerability

A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. The vulnerability is due to missing bounds checks in the Web Bridge functionality. An attacker could exploit this vulnerability by sending a crafted...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

Cisco Patches Critical Bug In Video Conferencing Server Hardware

On Wednesday Cisco Systems patched a critical vulnerability found in its Cisco Meeting Server hardware, a key component in its enterprise audio, web and video conferencing service. The flaw, according to a Cisco Security Advisory, could allow an unauthenticated remote attacker to masquerade as a...

Cisco Meeting Server Authentication Bypass Vulnerability

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. An authentication bypass vulnerability exists in the web-based management interface in Cisco Meeting Server versions 1.8.18 to 1.9.6 and...

Cisco Meeting Server Client Authentication Bypass Vulnerability

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of the Cisco Meeting Server CMS could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XMPP service incorrectly processing a deprecated authentication schem...

Cisco Warns of Command Injection Flaw in Cloud Platform

It’s already been a busy month of patching for Cisco Systems, and on Wednesday the networking giant rolled out nine more security updates addressing critical vulnerabilities across its core product lines. Most notably, Cisco is warning of two security holes one rated critical, the other high foun...

Cisco Meeting Server Cross-Site Scripting Vulnerability

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. A cross-site scripting vulnerability exists in the Web-based management interface of Cisco Meeting Server version 1.7 to 1.9. A remote...

CVE-2016-1451

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

CVE-2016-1451

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

CVE-2016-1451

Cisco Meeting Server (formerly Acano Conferencing Server) is affected by a cross-site scripting (XSS) vulnerability in its web-based management interface for version 1.7 through 1.9 (Bug ID CSCva19922). The root cause is improper input validation of certain HTTP parameters, enabling an attacker t...