Cross site request forgery (csrf)

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a Web Bridge user. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0...

Code injection

A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0...

CVE-2016-6444

CVE-2016-6444 affects Cisco Meeting Server. The OpenVAS and CVE records describe an unauthenticated, remote CSRF vulnerability in the Web Bridge interface caused by insufficient CSRF protections. An attacker could lure a user to a malicious link to submit arbitrary requests to the device with the...

CVE-2016-6446

Cisco Meeting Server Web Bridge vulnerability (CVE-2016-6446) allows an unauthenticated remote attacker to disclose memory from a connected server. The issue stems from missing bounds checks in the Web Bridge functionality; a crafted packet can per-packet disclose memory, potentially exposing pri...

Cisco Meeting Server Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a Web Bridge user. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by convincing the user of...

Cisco Meeting Server Information Disclosure Vulnerability

A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. The vulnerability is due to missing bounds checks in the Web Bridge functionality. An attacker could exploit this vulnerability by sending a crafted...