CVE-2016-1309

Cisco WebEx Meetings Server 2.5.1.5 is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient input validation in the web framework code. An unauthenticated, remote attacker could exploit these flaws by enticing a user to a malicious link or intercepting requests, ena...

CVE-2016-1309

Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...

Cisco WebEx Meetings Server Multiple Cross-Site Scripting Vulnerabilities

A vulnerability in the web framework code of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

Cisco WebEx Meetings for Android Access Bypass Vulnerability

Cisco WebEx Meetings for Android are a set of web-based online meeting applications for the WebEx Meetings solution from Cisco USA based on the Android platform. A security vulnerability exists in Cisco WebEx Meetings for Android versions prior to 8.5.1, which can be exploited by an attacker to...

CVE-2015-6384

The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442...

CVE-2015-6384

CVE-2015-6384 (Cisco WebEx Meetings for Android) affects WebEx Meetings for Android before version 8.5.1. The root cause is improper initialization of custom application permissions, which allows an attacker to bypass intended access restrictions via a crafted application. The vulnerability can b...

CVE-2015-6384

The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442...

try.webex.com XSS vulnerability

Vulnerable URL: http://try.webex.com/meet/aimm1/aimproinvite.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.01.2017 Latest check for patch:| 24.01.2017 09:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Cisco WebEx for Android Security Patch

Cisco has been busy the last two days pushing out a patch and security advisories for a number of its products, including a fix for a remotely exploitable vulnerability in its WebEx Meetings mobile application for Android. Cisco said the vulnerability affects versions prior to 8.5.1 of the app, a...

Cisco WebEx Meetings for Android Custom Permissions Vulnerability

A vulnerability in the custom application permissions handling for Cisco WebEx Meetings for Android could allow an unauthenticated, remote attacker to change platform-specific permissions of a custom application. The vulnerability is due to the way custom application permissions are assigned at...

Webex Access Detection

Binary data 8876.prm...

Cisco Media Convergence Server WebEx Node Open Redirect Vulnerability

WebEx Meeting Services is a hosted multimedia conferencing solution managed and maintained by Cisco WebEx. The Cisco WebEx Node for Media Convergence Server MCS suffers from an open redirection vulnerability in its implementation, which can be exploited by a remote attacker to redirect a user to ...

CVE-2015-4297

Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server MCS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136...

Open redirect

Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server MCS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136...

CVE-2015-4297

Open redirect vulnerability (CVE-2015-4297) in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary sites via crafted HTTP request parameters, enabling phishing-like redirection. Multiple sources (CNVD/CVE records) confirm the issue and note t...

CVE-2015-4297

Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server MCS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136...

Cisco WebEx Meeting Center Open Redirect Vulnerability

A vulnerability in the Cisco WebEx Meeting Center web interface could allow an unauthenticated, remote attacker to redirect a user to a undesired web page. The vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by...

Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability (CNVD-2015-04988)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A cross-site request forgery vulnerability exists in CWMS version 2.5 MR1. A remote attacker can exploit this...

Cisco WebEx Training Center Cross-Site Scripting Vulnerability

Cisco WebEx Training Center is an online training solution from Cisco. A cross-site scripting vulnerability in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via an unspecified value...

CVE-2015-4281

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCus56150 and CSCus56146...