Cisco Webex Centers CVE-2019-15987 Information Disclosure Vulnerability

Description Cisco Webex Centers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco Bug IDs CSCvq81213 and CSCvq81230. Cisco Webex Event Center, Cisco Webex...

Cisco Webex Teams for Windows CVE-2019-16001 DLL Loading Arbitrary Code Execution Vulnerability

Description Cisco Webex Teams for Windows is prone to a local arbitrary code-execution vulnerability. A local attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will result in a denial of service condition. This issue is being tracked by Cisco Bug ID CSCvq87642...

Cisco Webex Network Recording Player and Cisco Webex Player Buffer Overflow Vulnerability (CNVD-2020-18085)

Cisco Webex Network Recording Playey is the application for playing back ARF files. A buffer overflow vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows platforms, which can be exploited by an attacker who sends a malicious ARF or WRF file in the form ...

Cisco Webex Network Recording Player and Webex Player Buffer Overflow Vulnerability (CNVD-2020-18086)

Cisco Webex Network Recording Playey is the application for playing back ARF files. A buffer overflow vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows-based platforms, which can be exploited by an attacker who sends a malicious ARF or WRF file via a...

Cisco Webex Network Recording Player and Webex Player Buffer Overflow Vulnerability

Cisco Webex Network Recording Player and Cisco Webex Network Webex Player are both Cisco players for playing video conference recordings. A buffer overflow vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows platforms, which can be exploited by an...

Cisco Webex Meetings Privilege Permission and Access Control Issues Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A privilege-granting and access-control issue vulnerability exists in the Webex Network Recording Admin page in Cisco Webex Meetings versions prior to 39.7.0, which can be exploited by a remote attacker to elevate...

Cisco Webex Network Recording Admin Page Privilege Escalation Vulnerability

A vulnerability in the Webex Network Recording Admin page of Cisco Webex Meetings could allow an authenticated, remote attacker to elevate privileges in the context of the affected page. To exploit this vulnerability, the attacker must be logged in as a low-level administrator. The vulnerability ...

Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

Multiple Cisco WebEx Products Multiple Arbitrary Code Execution Vulnerabilities

Description Multiple Cisco WebEx products are prone to multiple local code-execution vulnerabilities. Successfully exploiting these issues will allow attackers to execute arbitrary code within the context of the application. These issues are being tracked by Cisco Bug IDs CSCvq32301, CSCvq36083,...

Cisco Webex Meetings CVE-2019-15960 Remote Privilege Escalation Vulnerability

Description Cisco Webex Meetings is prone to a remote privilege-escalation vulnerability. A remote attacker can exploit this issue to gain elevated privileges on the affected devices. This issue is tracked by Cisco Bug ID CSCvq37564. Technologies Affected Cisco WebEx Meetings Cisco Webex Meetings...

Cisco Webex Teams Installed (Windows)

Binary data ciscowebexteamsinstalledwin.nbin...

Cisco TelePresence CE Software CVE-2019-15962 Local Arbitrary File Write Vulnerability

Description Cisco TelePresence Collaboration Endpoint Software is prone to a local arbitrary file-write vulnerability. Successful exploits may allow an attacker to write arbitrary files on the root directory. This issue is being tracked by Cisco Bug ID CSCvq47315. Technologies Affected Cisco...

FasterXML Jackson-databind CVE-2019-16943 Remote Code Execution Vulnerability

Description FasterXML Jackson-databind is prone to a remote-code execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. FasterXML jackson-databi...

The vulnerability in the client application of the Cisco Webex Teams software allows a perpetrator to execute arbitrary commands.

The vulnerability in the client application of the Cisco Webex Teams software exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by guiding users through a specially crafted lin...

CVE-2019-16307

A Reflected Cross-Site Scripting XSS vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter webExMeetingLogin.jsp and meetingKey...

CVE-2019-16307

A Reflected Cross-Site Scripting XSS vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter webExMeetingLogin.jsp and meetingKey...

Cross site scripting

A Reflected Cross-Site Scripting XSS vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter webExMeetingLogin.jsp and meetingKey...

CVE-2019-16307

A Reflected XSS in the Fuji Xerox DocuShare webEx module up to version 7.0.0.C1.609 affects the webExMeetingLogin.jsp (handle parameter) and deleteWebExMeetingCheck.jsp (meetingKey parameter). The vulnerability allows remote attackers to inject arbitrary scripts/HTML via these inputs. The connect...

CVE-2019-16307

A Reflected Cross-Site Scripting XSS vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter webExMeetingLogin.jsp and meetingKey...

The vulnerability in the Cisco Webex Meetings Mobile software for web conferencing arises from errors during the verification of SSL certificates. This allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of Cisco Webex Meetings Mobile software stems from errors during the verification of SSL certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...